In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/326223182e4703cde99fdbd36d07d0b3de9980fb cve-icon cve-icon
https://git.kernel.org/stable/c/50e288097c2c6e5f374ae079394436fc29d1e88e cve-icon cve-icon
https://git.kernel.org/stable/c/51e8be9578a2e74f9983d8fd8de8cafed191f30c cve-icon cve-icon
https://git.kernel.org/stable/c/82d9084a97892de1ee4881eb5c17911fcd9be6f6 cve-icon cve-icon
https://git.kernel.org/stable/c/8cd90c7db08f32829bfa1b5b2b11fbc542afbab7 cve-icon cve-icon
https://git.kernel.org/stable/c/9566f6ee13b17a15d0a47667ad1b1893c539f730 cve-icon cve-icon
https://git.kernel.org/stable/c/f3009d0d6ab78053117f8857b921a8237f4d17b3 cve-icon cve-icon
https://git.kernel.org/stable/c/f3271f7548385e0096739965961c7cbf7e6b4762 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025040349-CVE-2025-22004-64f9@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-22004 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-22004 cve-icon
History

Fri, 23 May 2025 02:45:00 +0000

Type Values Removed Values Added
Metrics threat_severity

Low

 threat_severity

Moderate

Thu, 10 Apr 2025 13:15:00 +0000

Type Values Removed Values Added
References

Tue, 08 Apr 2025 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Fri, 04 Apr 2025 02:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Low

Thu, 03 Apr 2025 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 03 Apr 2025 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.
Title net: atm: fix use after free in lec_send()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-04-03T07:19:06.022Z

Updated: 2025-05-04T07:27:15.270Z

Reserved: 2024-12-29T08:45:45.802Z

Link: CVE-2025-22004

cve-icon Vulnrichment

Updated: 2025-04-03T15:25:38.346Z

cve-icon NVD

Status : Modified

Published: 2025-04-03T08:15:15.960

Modified: 2025-04-10T13:15:49.917

Link: CVE-2025-22004

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-04-03T00:00:00Z

Links: CVE-2025-22004 - Bugzilla