Memory Management Issue in Linux Kernel Affecting Socket Services

CVE-2025-38514

What is CVE-2025-38514?

This vulnerability exists within the Linux kernel and affects AF_RXRPC service sockets where, if calls are preallocated and there is no rxrpc_backlog structure, it may lead to system crashes. Specifically, if an AF_RXRPC socket is opened and bound, the function rxrpc_alloc_incoming_call() fails when it tries to reference a non-existent backlog structure. The resolution involves returning NULL in such cases to prevent incoming calls from being mishandled, thereby ensuring system stability.

References