Acknowledged
Created: Jul 7, 2025
Updated: Jul 8, 2025
Found In Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel
In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]net: atm: fix /proc/net/atm/lec handling[EOL][EOL]/proc/net/atm/lec must ensure safety against dev_lec[] changes.[EOL][EOL]It appears it had dev_put() calls without prior dev_hold(),[EOL]leading to imbalance and UAF.
CREATE(Triage):(User=admin) [CVE-2025-38180 (https://nvd.nist.gov/vuln/detail/CVE-2025-38180)
