CVE-2025-22109

CVE-2025-22109 concerns the AX25 autobind feature in the Linux kernel. The linked debugging output shows memory leaks and refcount leaks in ax25_connect() and ax25_release() when autobind is used, caused by refcounts not being incremented as in ax25_bind()/ax25_setsockopt(SO_BINDTODEVICE). The fi...

CVE-2025-22109: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: ax25: Remove broken autobind Binding AX25 socket by using the autobind feature leads to memory leaks in ax25connect and also refcount leaks in ax25release. Memory leak was detected with kmemleak:...

ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt

...

PT-2025-16749

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description A memory leak issue has been identified in the Linux kernel, specifically in the ax25 module. The problem occurs when using the autobind feature to bind an AX25 socket, leading to...

The vulnerability of the ax25_dev_device_down() function in the net/ax25/ax25_dev.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ax25devdevicedown function in the net/ax25/ax25dev.c module of the Linux operating system is related to a resource leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2025-21792

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ax25: Fix refcount leak caused by setting SOBINDTODEVICE sockopt If an AX25 device is bound to a socket by setting the SOBINDTODEVICE socket option, a refcount...

Linux Distros Unpatched Vulnerability : CVE-2025-21812

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possibl...

Linux Distros Unpatched Vulnerability : CVE-2024-38554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the object netdevice in ax25devdevicedown. When the ax25 device is...

Linux Distros Unpatched Vulnerability : CVE-2024-36009

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ax25: Fix netdev refcount issue The devtracker is added to ax25cb in ax25bind. When the ax25 device is detaching, the devtracker of ax25cb should be deallocated...

Linux Distros Unpatched Vulnerability : CVE-2024-38602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issues of ax25dev The ax25addrax25dev and ax25devdevicedown...

SUSE CVE-2025-21812

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possible UAF in ax25. 1 WARNING: possible circular locking dependency detecte...

SUSE CVE-2025-21792

In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount leak caused by setting SOBINDTODEVICE sockopt If an AX25 device is bound to a socket by setting the SOBINDTODEVICE socket option, a refcount leak will occur in ax25release. Commit 9fd75b66b8f6 "ax25: Fix refcou...

CVE-2025-21812

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possible UAF in ax25. 1 WARNING: possible circular locking dependency detecte...

DEBIAN-CVE-2025-21812

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possible UAF in ax25. 1 WARNING: possible circular locking dependency detecte...

UBUNTU-CVE-2025-21812

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possible UAF in ax25. 1 WARNING: possible circular locking dependency detecte...

CVE-2025-21812

CVE-2025-21812 concerns AX25 code in the Linux kernel. A lockdep/potential deadlock issue was observed around ax25_setsockopt() where a syzbot thread attempting to acquire rtnl_mutex could deadlock with a thread holding sk_lock-AF_AX25, due to an existing dependency chain involving ax25_setsockop...

CVE-2025-21812 ax25: rcu protect dev->ax25_ptr

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possible UAF in ax25. 1 WARNING: possible circular locking dependency detecte...

CVE-2025-21812 ax25: rcu protect dev->ax25_ptr

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possible UAF in ax25. 1 WARNING: possible circular locking dependency detecte...

CVE-2025-21812

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possible UAF in ax25. 1 WARNING: possible circular locking dependency detecte...

CVE-2025-21812 ax25: rcu protect dev->ax25_ptr

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev-ax25ptr syzbot found a lockdep issue 1. We should remove ax25 RTNL dependency in ax25setsockopt This should also fix a variety of possible UAF in ax25. 1 WARNING: possible circular locking dependency detecte...