Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-59658.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-59658
Upstream
Published
2025-04-03T08:15:15Z
Modified
2026-04-01T05:19:31.866612Z
Summary
CVE-2025-22004 affecting package kernel for versions less than 6.6.85.1-2
Details

In the Linux kernel, the following vulnerability has been resolved:

net: atm: fix use after free in lec_send()

The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.

References

Affected packages

Azure Linux:3 / kernel

Package

Name
kernel
Purl
pkg:rpm/azure-linux/kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.6.85.1-2

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-59658.json"