CVE-2025-38542: linux kernel +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2025-38542

CVSS 5.5 · Medium EPSS 0,17%

Kerentanan pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtr_create() When updating an existing route entry in atrtr_create(), the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix this by calling dev_put() to release the old device reference before holding the new one.

Rincian

Terbit di NVD: 16 Agustus 2025
Terakhir diubah: 30 Juli 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
EPSS (30 hari): 0,17% peluang dieksploitasi; lebih tinggi dari 6,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
linux	linux kernel	Versi 2.6.13 hingga sebelum 5.4.296
linux	linux kernel	Versi 5.5 hingga sebelum 5.10.240
linux	linux kernel	Versi 5.11 hingga sebelum 5.15.189
linux	linux kernel	Versi 5.16 hingga sebelum 6.1.146
linux	linux kernel	Versi 6.2 hingga sebelum 6.6.99
linux	linux kernel	Versi 6.7 hingga sebelum 6.12.39
linux	linux kernel	Versi 6.13 hingga sebelum 6.15.7
linux	linux kernel	Versi 2.6.12
linux	linux kernel	Versi 2.6.12 rc3
linux	linux kernel	Versi 2.6.12 rc4
linux	linux kernel	Versi 2.6.12 rc5
linux	linux kernel	Versi 6.16 rc1
linux	linux kernel	Versi 6.16 rc2
linux	linux kernel	Versi 6.16 rc3
linux	linux kernel	Versi 6.16 rc4
linux	linux kernel	Versi 6.16 rc5
debian	debian linux	Versi 11.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://git.kernel.org/stable/c/473f3eadfc73b0fb6d8dee5829d19a5772e387f7 patch
https://git.kernel.org/stable/c/4a17370da6e476d3d275534e9e9cd2d02c57ca46 patch
https://git.kernel.org/stable/c/64124cf0aab0dd1e18c0fb5ae66e45741e727f8b patch
https://git.kernel.org/stable/c/711c80f7d8b163d3ecd463cd96f07230f488e750 patch
https://git.kernel.org/stable/c/a7852b01793669248dce0348d14df89e77a32afd patch
https://git.kernel.org/stable/c/b2f5dfa87367fdce9f8b995bc6c38f64f9ea2c90 patch
https://git.kernel.org/stable/c/b92bedf71f25303e203a4e657489d76691a58119 patch
https://git.kernel.org/stable/c/d2e9f50f0bdad73b64a871f25186b899624518c4 patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html mailing list · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.