Linux Kernel Vulnerability in AX.25 Protocol Affects Multiple Vendors

CVE-2025-39848

What is CVE-2025-39848?

In the Linux kernel, a vulnerability related to the AX.25 protocol has been identified, where the function ax25_kiss_rcv() fails to unshare socket buffers (skbs) correctly. This oversight can lead to potential crashes when skb->dev becomes NULL, following a regression caused by a previous commit. Such conditions can result in various undefined behaviors and system instability. The issue is notably similar to a past vulnerability that was resolved by ensuring proper skb management in related networking protocols.

References