CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• debian debian linux11.0
• linux linux kernel5.5 and later · before 5.10.239
• linux linux kernel5.11 and later · before 5.15.186
• linux linux kernel5.16 and later · before 6.1.142
• linux linux kernel6.2 and later · before 6.6.95
• linux linux kernel2.6.13 and later · before 5.4.295
• linux linux kernel6.13 and later · before 6.15.4
• linux linux kernel6.7 and later · before 6.12.35
• linux linux kernel2.6.12
• linux linux kernel6.16

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • 2.6.12affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and later · before fcfccf56f4eba7d00aa2d33c7bb1b33083237742affected · git
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and later · before f2d1443b18806640abdb530e88009af7be2588e7affected · git
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and later · before ca3829c18c8d0ceb656605d3bff6bb3dfb078589affected · git
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and later · before e612c4b014f5808fbc6beae21f5ccaca5e76a2f8affected · git
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and later · before a5e3a144268899f1a8c445c8a3bfa15873ba85e8affected · git
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and later · before 5fe1b23a2f87f43aeeac51e08819cbc6fd808cbcaffected · git
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and later · before 9b9aeb3ada44d8abea1e31e4446113f460848ae4affected · git
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and later · before d03b79f459c7935cff830d98373474f440bd03aeaffected · git
  • before 2.6.12not affected · semver

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV
  90Now
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe…KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now

Published before and after this one in the same product

• ← EarlierCVE-2025-38177Jul 4, 2025 · sch_hfsc: make hfsc_qlen_notify() idempotent
  22Monitor
• ← EarlierCVE-2025-38179Jul 4, 2025 · smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()
  31Monitor
• Later →CVE-2025-38183Jul 4, 2025 · net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()
  31Monitor

Root cause

After a memory region is freed, another reference pointing to it is still used. By then, the same region may have been allocated for different data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1free(dev->buf);2/* ... another thread is still running ... */3process(dev->buf);

1lock(&dev->lock);2free(dev->buf);3dev->buf = NULL;4unlock(&dev->lock);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.