AZL-75087
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-75087.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-75087
- Upstream
- Published
- 2025-08-16T11:15:44Z
- Modified
- 2026-04-01T05:22:48.640537Z
- Summary
- CVE-2025-38514 affecting package kernel for versions less than 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix oops due to non-existence of prealloc backlog struct
If an AFRXRPC service socket is opened and bound, but calls are preallocated, then rxrpcallocincomingcall() will oops because the rxrpc_backlog struct doesn't get allocated until the first preallocation is made.
Fix this by returning NULL from rxrpcallocincoming_call() if there is no backlog struct. This will cause the incoming call to be aborted.
- References