In the Linux kernel, the following vulnerability has been resolved:
net: atm: fix use after free in lec_send()
The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.
[
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c",
"function": "lec_send"
},
"digest": {
"length": 315.0,
"function_hash": "208595964455572661627568011449158528745"
},
"id": "CVE-2025-22004-11e6037c",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@82d9084a97892de1ee4881eb5c17911fcd9be6f6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"140982194473456284655577955072550493681",
"296513112958239514169726885400059035930",
"91998384793590248680894217801242958121",
"101231030639658463570172148195867519771",
"114424877148071169618273184066674632442",
"192886805943921531511388394377978637335",
"295603384678627133845636799821706377823",
"150621835750863875783135509379152139479"
]
},
"id": "CVE-2025-22004-1a243829",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@326223182e4703cde99fdbd36d07d0b3de9980fb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"140982194473456284655577955072550493681",
"296513112958239514169726885400059035930",
"91998384793590248680894217801242958121",
"101231030639658463570172148195867519771",
"114424877148071169618273184066674632442",
"192886805943921531511388394377978637335",
"295603384678627133845636799821706377823",
"150621835750863875783135509379152139479"
]
},
"id": "CVE-2025-22004-2ebd50db",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51e8be9578a2e74f9983d8fd8de8cafed191f30c",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"140982194473456284655577955072550493681",
"296513112958239514169726885400059035930",
"91998384793590248680894217801242958121",
"101231030639658463570172148195867519771",
"114424877148071169618273184066674632442",
"192886805943921531511388394377978637335",
"295603384678627133845636799821706377823",
"150621835750863875783135509379152139479"
]
},
"id": "CVE-2025-22004-69edf6c2",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@82d9084a97892de1ee4881eb5c17911fcd9be6f6",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"140982194473456284655577955072550493681",
"296513112958239514169726885400059035930",
"91998384793590248680894217801242958121",
"101231030639658463570172148195867519771",
"114424877148071169618273184066674632442",
"192886805943921531511388394377978637335",
"295603384678627133845636799821706377823",
"150621835750863875783135509379152139479"
]
},
"id": "CVE-2025-22004-6a705063",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3009d0d6ab78053117f8857b921a8237f4d17b3",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c",
"function": "lec_send"
},
"digest": {
"length": 315.0,
"function_hash": "208595964455572661627568011449158528745"
},
"id": "CVE-2025-22004-6bb24fa3",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3009d0d6ab78053117f8857b921a8237f4d17b3",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c",
"function": "lec_send"
},
"digest": {
"length": 315.0,
"function_hash": "208595964455572661627568011449158528745"
},
"id": "CVE-2025-22004-90bd2988",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@51e8be9578a2e74f9983d8fd8de8cafed191f30c",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c",
"function": "lec_send"
},
"digest": {
"length": 315.0,
"function_hash": "208595964455572661627568011449158528745"
},
"id": "CVE-2025-22004-ab9a7fae",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9566f6ee13b17a15d0a47667ad1b1893c539f730",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"140982194473456284655577955072550493681",
"296513112958239514169726885400059035930",
"91998384793590248680894217801242958121",
"101231030639658463570172148195867519771",
"114424877148071169618273184066674632442",
"192886805943921531511388394377978637335",
"295603384678627133845636799821706377823",
"150621835750863875783135509379152139479"
]
},
"id": "CVE-2025-22004-b177f9bb",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9566f6ee13b17a15d0a47667ad1b1893c539f730",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"140982194473456284655577955072550493681",
"296513112958239514169726885400059035930",
"91998384793590248680894217801242958121",
"101231030639658463570172148195867519771",
"114424877148071169618273184066674632442",
"192886805943921531511388394377978637335",
"295603384678627133845636799821706377823",
"150621835750863875783135509379152139479"
]
},
"id": "CVE-2025-22004-badbe96e",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3271f7548385e0096739965961c7cbf7e6b4762",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c",
"function": "lec_send"
},
"digest": {
"length": 315.0,
"function_hash": "208595964455572661627568011449158528745"
},
"id": "CVE-2025-22004-e42dc519",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@326223182e4703cde99fdbd36d07d0b3de9980fb",
"signature_version": "v1"
},
{
"deprecated": false,
"target": {
"file": "net/atm/lec.c",
"function": "lec_send"
},
"digest": {
"length": 315.0,
"function_hash": "208595964455572661627568011449158528745"
},
"id": "CVE-2025-22004-ffeee75a",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3271f7548385e0096739965961c7cbf7e6b4762",
"signature_version": "v1"
}
]