In the Linux kernel, the following vulnerability has been resolved:
net: atm: fix /proc/net/atm/lec handling
/proc/net/atm/lec must ensure safety against dev_lec[] changes.
It appears it had devput() calls without prior devhold(), leading to imbalance and UAF.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b9aeb3ada44d8abea1e31e4446113f460848ae4",
"id": "CVE-2025-38180-08a4d403",
"digest": {
"function_hash": "109335151262032267603903076087808393889",
"length": 202.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_stop",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5fe1b23a2f87f43aeeac51e08819cbc6fd808cbc",
"id": "CVE-2025-38180-0e39c043",
"digest": {
"line_hashes": [
"116398757783444624551537845325445041943",
"303892216429476864603488289025111862835",
"253186563827996476805164429847454767884",
"53022140928839058820226699706855571063",
"14933333917373894533813004833808744758",
"32341649346017475945260231401212190705",
"163274394077564844465887918438954136853",
"264385236219694427872895836519199011753",
"328760000988236705874289286540503252571",
"179011176395187113086585088542991041117",
"241266352044145652413114372007959620454",
"159161894754700578231380683116181325911"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e612c4b014f5808fbc6beae21f5ccaca5e76a2f8",
"id": "CVE-2025-38180-193db5d9",
"digest": {
"function_hash": "43464853740264892795635777732806584751",
"length": 297.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_start",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d03b79f459c7935cff830d98373474f440bd03ae",
"id": "CVE-2025-38180-1ed47dc3",
"digest": {
"line_hashes": [
"116398757783444624551537845325445041943",
"303892216429476864603488289025111862835",
"253186563827996476805164429847454767884",
"53022140928839058820226699706855571063",
"14933333917373894533813004833808744758",
"32341649346017475945260231401212190705",
"163274394077564844465887918438954136853",
"264385236219694427872895836519199011753",
"328760000988236705874289286540503252571",
"179011176395187113086585088542991041117",
"241266352044145652413114372007959620454",
"159161894754700578231380683116181325911"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5e3a144268899f1a8c445c8a3bfa15873ba85e8",
"id": "CVE-2025-38180-262070a9",
"digest": {
"function_hash": "294501920222780532738445427344245805427",
"length": 333.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_itf_walk",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca3829c18c8d0ceb656605d3bff6bb3dfb078589",
"id": "CVE-2025-38180-2be4b9e1",
"digest": {
"function_hash": "43464853740264892795635777732806584751",
"length": 297.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_start",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5fe1b23a2f87f43aeeac51e08819cbc6fd808cbc",
"id": "CVE-2025-38180-2d899a9e",
"digest": {
"function_hash": "294501920222780532738445427344245805427",
"length": 333.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_itf_walk",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b9aeb3ada44d8abea1e31e4446113f460848ae4",
"id": "CVE-2025-38180-3ddf97fd",
"digest": {
"function_hash": "43464853740264892795635777732806584751",
"length": 297.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_start",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f2d1443b18806640abdb530e88009af7be2588e7",
"id": "CVE-2025-38180-487d8855",
"digest": {
"function_hash": "109335151262032267603903076087808393889",
"length": 202.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_stop",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fcfccf56f4eba7d00aa2d33c7bb1b33083237742",
"id": "CVE-2025-38180-54d74008",
"digest": {
"function_hash": "43464853740264892795635777732806584751",
"length": 297.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_start",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5e3a144268899f1a8c445c8a3bfa15873ba85e8",
"id": "CVE-2025-38180-618e5cd3",
"digest": {
"function_hash": "43464853740264892795635777732806584751",
"length": 297.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_start",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5e3a144268899f1a8c445c8a3bfa15873ba85e8",
"id": "CVE-2025-38180-67a1e345",
"digest": {
"function_hash": "109335151262032267603903076087808393889",
"length": 202.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_stop",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b9aeb3ada44d8abea1e31e4446113f460848ae4",
"id": "CVE-2025-38180-6f571c2b",
"digest": {
"line_hashes": [
"116398757783444624551537845325445041943",
"303892216429476864603488289025111862835",
"253186563827996476805164429847454767884",
"53022140928839058820226699706855571063",
"14933333917373894533813004833808744758",
"32341649346017475945260231401212190705",
"163274394077564844465887918438954136853",
"264385236219694427872895836519199011753",
"328760000988236705874289286540503252571",
"179011176395187113086585088542991041117",
"241266352044145652413114372007959620454",
"159161894754700578231380683116181325911"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d03b79f459c7935cff830d98373474f440bd03ae",
"id": "CVE-2025-38180-731431c1",
"digest": {
"function_hash": "109335151262032267603903076087808393889",
"length": 202.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_stop",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fcfccf56f4eba7d00aa2d33c7bb1b33083237742",
"id": "CVE-2025-38180-7a72677c",
"digest": {
"function_hash": "109335151262032267603903076087808393889",
"length": 202.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_stop",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b9aeb3ada44d8abea1e31e4446113f460848ae4",
"id": "CVE-2025-38180-7eb21aba",
"digest": {
"function_hash": "294501920222780532738445427344245805427",
"length": 333.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_itf_walk",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fcfccf56f4eba7d00aa2d33c7bb1b33083237742",
"id": "CVE-2025-38180-8c8f61a6",
"digest": {
"line_hashes": [
"116398757783444624551537845325445041943",
"303892216429476864603488289025111862835",
"253186563827996476805164429847454767884",
"53022140928839058820226699706855571063",
"14933333917373894533813004833808744758",
"32341649346017475945260231401212190705",
"163274394077564844465887918438954136853",
"264385236219694427872895836519199011753",
"328760000988236705874289286540503252571",
"179011176395187113086585088542991041117",
"241266352044145652413114372007959620454",
"159161894754700578231380683116181325911"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e612c4b014f5808fbc6beae21f5ccaca5e76a2f8",
"id": "CVE-2025-38180-92d25d4a",
"digest": {
"line_hashes": [
"116398757783444624551537845325445041943",
"303892216429476864603488289025111862835",
"253186563827996476805164429847454767884",
"53022140928839058820226699706855571063",
"14933333917373894533813004833808744758",
"32341649346017475945260231401212190705",
"163274394077564844465887918438954136853",
"264385236219694427872895836519199011753",
"328760000988236705874289286540503252571",
"179011176395187113086585088542991041117",
"241266352044145652413114372007959620454",
"159161894754700578231380683116181325911"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca3829c18c8d0ceb656605d3bff6bb3dfb078589",
"id": "CVE-2025-38180-9cbfa45e",
"digest": {
"function_hash": "294501920222780532738445427344245805427",
"length": 333.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_itf_walk",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e612c4b014f5808fbc6beae21f5ccaca5e76a2f8",
"id": "CVE-2025-38180-a05b8f3c",
"digest": {
"function_hash": "294501920222780532738445427344245805427",
"length": 333.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_itf_walk",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f2d1443b18806640abdb530e88009af7be2588e7",
"id": "CVE-2025-38180-b9f993db",
"digest": {
"function_hash": "294501920222780532738445427344245805427",
"length": 333.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_itf_walk",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d03b79f459c7935cff830d98373474f440bd03ae",
"id": "CVE-2025-38180-bcfb4ff0",
"digest": {
"function_hash": "294501920222780532738445427344245805427",
"length": 333.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_itf_walk",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5fe1b23a2f87f43aeeac51e08819cbc6fd808cbc",
"id": "CVE-2025-38180-be7913da",
"digest": {
"function_hash": "109335151262032267603903076087808393889",
"length": 202.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_stop",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d03b79f459c7935cff830d98373474f440bd03ae",
"id": "CVE-2025-38180-c315c9cf",
"digest": {
"function_hash": "43464853740264892795635777732806584751",
"length": 297.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_start",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca3829c18c8d0ceb656605d3bff6bb3dfb078589",
"id": "CVE-2025-38180-c8fea326",
"digest": {
"line_hashes": [
"116398757783444624551537845325445041943",
"303892216429476864603488289025111862835",
"253186563827996476805164429847454767884",
"53022140928839058820226699706855571063",
"14933333917373894533813004833808744758",
"32341649346017475945260231401212190705",
"163274394077564844465887918438954136853",
"264385236219694427872895836519199011753",
"328760000988236705874289286540503252571",
"179011176395187113086585088542991041117",
"241266352044145652413114372007959620454",
"159161894754700578231380683116181325911"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f2d1443b18806640abdb530e88009af7be2588e7",
"id": "CVE-2025-38180-cc8a90f2",
"digest": {
"function_hash": "43464853740264892795635777732806584751",
"length": 297.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_start",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e612c4b014f5808fbc6beae21f5ccaca5e76a2f8",
"id": "CVE-2025-38180-d3af5a55",
"digest": {
"function_hash": "109335151262032267603903076087808393889",
"length": 202.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_stop",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca3829c18c8d0ceb656605d3bff6bb3dfb078589",
"id": "CVE-2025-38180-d6d9ef1c",
"digest": {
"function_hash": "109335151262032267603903076087808393889",
"length": 202.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_stop",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f2d1443b18806640abdb530e88009af7be2588e7",
"id": "CVE-2025-38180-dba25994",
"digest": {
"line_hashes": [
"116398757783444624551537845325445041943",
"303892216429476864603488289025111862835",
"253186563827996476805164429847454767884",
"53022140928839058820226699706855571063",
"14933333917373894533813004833808744758",
"32341649346017475945260231401212190705",
"163274394077564844465887918438954136853",
"264385236219694427872895836519199011753",
"328760000988236705874289286540503252571",
"179011176395187113086585088542991041117",
"241266352044145652413114372007959620454",
"159161894754700578231380683116181325911"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5fe1b23a2f87f43aeeac51e08819cbc6fd808cbc",
"id": "CVE-2025-38180-ed85d703",
"digest": {
"function_hash": "43464853740264892795635777732806584751",
"length": 297.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_seq_start",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fcfccf56f4eba7d00aa2d33c7bb1b33083237742",
"id": "CVE-2025-38180-f100e577",
"digest": {
"function_hash": "294501920222780532738445427344245805427",
"length": 333.0
},
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "lec_itf_walk",
"file": "net/atm/lec.c"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5e3a144268899f1a8c445c8a3bfa15873ba85e8",
"id": "CVE-2025-38180-f596a9ba",
"digest": {
"line_hashes": [
"116398757783444624551537845325445041943",
"303892216429476864603488289025111862835",
"253186563827996476805164429847454767884",
"53022140928839058820226699706855571063",
"14933333917373894533813004833808744758",
"32341649346017475945260231401212190705",
"163274394077564844465887918438954136853",
"264385236219694427872895836519199011753",
"328760000988236705874289286540503252571",
"179011176395187113086585088542991041117",
"241266352044145652413114372007959620454",
"159161894754700578231380683116181325911"
],
"threshold": 0.9
},
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"signature_type": "Line"
}
]