Memory Management Issue in Linux Kernel Affecting ATM Subsystem

CVE-2025-38185

What is CVE-2025-38185?

A memory management issue was discovered in the Linux kernel's ATM subsystem. The vulnerability arises when handling socket buffers (skb) in the atmtcp_c_send method. If the skb length is zero, the code does not adequately free resources, leading to possible memory leaks. Specifically, both skb and socket structures are not released properly, resulting in uninitialized data being accessed. An attacker could exploit this flaw to cause unexpected behavior in applications using the ATM protocol. It is crucial to follow security advisories and apply patches immediately to mitigate risks associated with this vulnerability.

References