Device Reference Count Leak in Linux Kernel

CVE-2025-38542

What is CVE-2025-38542?

A vulnerability exists in the Linux Kernel's appletalk implementation, where an outdated device reference is not properly released during the update of a route entry in the atrtr_create() function. This oversight can lead to a device reference count leak, which can impact system stability and resource management. The vulnerability has been addressed by implementing a fix that ensures the old device reference is released before assigning the new one, thereby preventing potential memory resource exhaustion.

References