| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <2025070410-CVE-2025-38180-c6d0@gregkh> Date: Fri, 4 Jul 2025 15:37:09 +0200 From: Greg Kroah-Hartman <gregkh@...uxfoundation.org> To: linux-cve-announce@...r.kernel.org Cc: Greg Kroah-Hartman <gregkh@...nel.org> Subject: CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling From: Greg Kroah-Hartman <gregkh@...nel.org> Description =========== In the Linux kernel, the following vulnerability has been resolved: net: atm: fix /proc/net/atm/lec handling /proc/net/atm/lec must ensure safety against dev_lec[] changes. It appears it had dev_put() calls without prior dev_hold(), leading to imbalance and UAF. The Linux kernel CVE team has assigned CVE-2025-38180 to this issue. Affected and fixed versions =========================== Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 5.4.295 with commit fcfccf56f4eba7d00aa2d33c7bb1b33083237742 Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 5.10.239 with commit f2d1443b18806640abdb530e88009af7be2588e7 Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 5.15.186 with commit ca3829c18c8d0ceb656605d3bff6bb3dfb078589 Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.1.142 with commit e612c4b014f5808fbc6beae21f5ccaca5e76a2f8 Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.6.95 with commit a5e3a144268899f1a8c445c8a3bfa15873ba85e8 Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.12.35 with commit 5fe1b23a2f87f43aeeac51e08819cbc6fd808cbc Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.15.4 with commit 9b9aeb3ada44d8abea1e31e4446113f460848ae4 Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.16-rc3 with commit d03b79f459c7935cff830d98373474f440bd03ae Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2025-38180 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: net/atm/lec.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/fcfccf56f4eba7d00aa2d33c7bb1b33083237742 https://git.kernel.org/stable/c/f2d1443b18806640abdb530e88009af7be2588e7 https://git.kernel.org/stable/c/ca3829c18c8d0ceb656605d3bff6bb3dfb078589 https://git.kernel.org/stable/c/e612c4b014f5808fbc6beae21f5ccaca5e76a2f8 https://git.kernel.org/stable/c/a5e3a144268899f1a8c445c8a3bfa15873ba85e8 https://git.kernel.org/stable/c/5fe1b23a2f87f43aeeac51e08819cbc6fd808cbc https://git.kernel.org/stable/c/9b9aeb3ada44d8abea1e31e4446113f460848ae4 https://git.kernel.org/stable/c/d03b79f459c7935cff830d98373474f440bd03ae
Powered by blists - more mailing lists