In the Linux kernel, the following vulnerability has been resolved:
net: appletalk: Fix device refcount leak in atrtr_create()
When updating an existing route entry in atrtrcreate(), the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix this by calling devput() to release the old device reference before holding the new one.
[
{
"id": "CVE-2025-38542-0224c84d",
"target": {
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64124cf0aab0dd1e18c0fb5ae66e45741e727f8b",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-05312e18",
"target": {
"function": "atrtr_create",
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@473f3eadfc73b0fb6d8dee5829d19a5772e387f7",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-0c97b38f",
"target": {
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@473f3eadfc73b0fb6d8dee5829d19a5772e387f7",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-2855eb52",
"target": {
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a17370da6e476d3d275534e9e9cd2d02c57ca46",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-35d9ce29",
"target": {
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7852b01793669248dce0348d14df89e77a32afd",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-3a5ed186",
"target": {
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b92bedf71f25303e203a4e657489d76691a58119",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-443f40d5",
"target": {
"function": "atrtr_create",
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4a17370da6e476d3d275534e9e9cd2d02c57ca46",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-b5ff8720",
"target": {
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@711c80f7d8b163d3ecd463cd96f07230f488e750",
"digest": {
"line_hashes": [
"301256514362913573242778066733178830054",
"67079491451437141158486651063470369266",
"327653240597950838431660986121026811177",
"177399349143844328226082510334703108396"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38542-c842a790",
"target": {
"function": "atrtr_create",
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64124cf0aab0dd1e18c0fb5ae66e45741e727f8b",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-d373bb04",
"target": {
"function": "atrtr_create",
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b92bedf71f25303e203a4e657489d76691a58119",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-f7e1b488",
"target": {
"function": "atrtr_create",
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@711c80f7d8b163d3ecd463cd96f07230f488e750",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38542-fb535193",
"target": {
"function": "atrtr_create",
"file": "net/appletalk/ddp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7852b01793669248dce0348d14df89e77a32afd",
"digest": {
"length": 1580.0,
"function_hash": "74157584763606900718634699114075342782"
},
"signature_type": "Function"
}
]