PT-2025-33557
CVE-2025-38514
·
Published
2025-07-10
·
Updated
2026-10-21
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A flaw exists in the Linux kernel related to the rxrpc subsystem. Specifically, if an AF RXRPC service socket is opened and bound with preallocated calls, the
rxrpc alloc incoming call() function may cause a system crash (oops) because the rxrpc backlog struct is not allocated until the first preallocation is made. The issue occurs when attempting to allocate an incoming call without a pre-existing backlog structure.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾