CVE-2025-38542

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38542
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38542.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38542
Downstream
Published
2025-08-16T11:22:16.689Z
Modified
2025-11-28T02:35:02.375540Z
Summary
net: appletalk: Fix device refcount leak in atrtr_create()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: appletalk: Fix device refcount leak in atrtr_create()

When updating an existing route entry in atrtrcreate(), the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix this by calling devput() to release the old device reference before holding the new one.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38542.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d
Fixed
b92bedf71f25303e203a4e657489d76691a58119
Fixed
a7852b01793669248dce0348d14df89e77a32afd
Fixed
b2f5dfa87367fdce9f8b995bc6c38f64f9ea2c90
Fixed
d2e9f50f0bdad73b64a871f25186b899624518c4
Fixed
4a17370da6e476d3d275534e9e9cd2d02c57ca46
Fixed
473f3eadfc73b0fb6d8dee5829d19a5772e387f7
Fixed
64124cf0aab0dd1e18c0fb5ae66e45741e727f8b
Fixed
711c80f7d8b163d3ecd463cd96f07230f488e750

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.12
Fixed
5.4.296
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.240
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.189
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.146
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.99
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.39
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.7