PT-2025-33587
CVE-2025-38544
·
Published
2025-07-08
·
Updated
2026-10-18
Description by
CVSS 4.0
6.8
MediumMetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A flaw exists in the Linux kernel’s rxrpc subsystem related to preallocation of incoming calls when using AF RXRPC for server functionality. The issue arises from a collision during preallocation, where attempts to preallocate a call with an already in-use call ID do not correctly handle error conditions. This can lead to assertions being triggered within the
rxrpc cleanup call() function because the call is not properly marked as complete or released.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾