Linux Kernel Vulnerability in AF_RXRPC Preallocation Handling

CVE-2025-38544

What is CVE-2025-38544?

A flaw exists in the Linux kernel's AF_RXRPC mechanism, where incorrect handling during the preallocation of incoming calls can lead to issues in call ID management. When a server uses AF_RXRPC to process calls, it preallocates call IDs, which must not collide with currently in-use IDs. In the event of an error during this process, the cleanup functions may not mark the call as complete or released, causing instability in call handling and potentially revealing details of the state of these calls. This vulnerability can affect the robustness of server communication frameworks relying on AF_RXRPC.

References