NetSight
IP …
high7.8

CVE-2025-38542

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtr_create() When updating an existing route …

Impact

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtr_create() When updating an existing route entry in atrtr_create(), the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix this by calling dev_put() to release the old device reference before holding the new one.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.13 before 5.4.296
from 5.5 before 5.10.240
from 5.11 before 5.15.189
from 5.16 before 6.1.146
from 6.2 before 6.6.99
from 6.7 before 6.12.39
DebianDebian Linux
Version 11.0

References