In the Linux kernel, the following vulnerability has been resolved:
net: appletalk: Fix device refcount leak in atrtr_create()
When updating an existing route entry in atrtrcreate(), the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix this by calling devput() to release the old device reference before holding the new one.
[
{
"id": "CVE-2025-38542-014f3ad0",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c",
"function": "atrtr_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2f5dfa87367fdce9f8b995bc6c38f64f9ea2c90",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-05312e18",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c",
"function": "atrtr_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@473f3eadfc73b0fb6d8dee5829d19a5772e387f7",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-0c97b38f",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@473f3eadfc73b0fb6d8dee5829d19a5772e387f7",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-2855eb52",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a17370da6e476d3d275534e9e9cd2d02c57ca46",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-35d9ce29",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7852b01793669248dce0348d14df89e77a32afd",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-3a5ed186",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b92bedf71f25303e203a4e657489d76691a58119",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-443f40d5",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c",
"function": "atrtr_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a17370da6e476d3d275534e9e9cd2d02c57ca46",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-5074503c",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2f5dfa87367fdce9f8b995bc6c38f64f9ea2c90",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-b5ff8720",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@711c80f7d8b163d3ecd463cd96f07230f488e750",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-d2ae1737",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c",
"function": "atrtr_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2e9f50f0bdad73b64a871f25186b899624518c4",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-d373bb04",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c",
"function": "atrtr_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b92bedf71f25303e203a4e657489d76691a58119",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-f7e1b488",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c",
"function": "atrtr_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@711c80f7d8b163d3ecd463cd96f07230f488e750",
"signature_version": "v1",
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-fabf3531",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d2e9f50f0bdad73b64a871f25186b899624518c4",
"signature_version": "v1",
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-fb535193",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"deprecated": false,
"target": {
"file": "net/appletalk/ddp.c",
"function": "atrtr_create"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7852b01793669248dce0348d14df89e77a32afd",
"signature_version": "v1",
"signature_type": "Function"
}
]