Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2025-38514— rxrpc: Fix oops due to non-existence of prealloc backlog struct

EPSS 0.03% · P7

Affected Version Matrix 18

VendorProductVersion RangeStatus
LinuxLinux248f219cb8bcbfbd7f132752d44afa2df7c241d1< bf0ca6a1bc4fb904b598137c6718785a107e3adfaffected
248f219cb8bcbfbd7f132752d44afa2df7c241d1< f7afb3ff01c42c49e8a143cdce400b95844bb506affected
248f219cb8bcbfbd7f132752d44afa2df7c241d1< f5e72b7824d08c206ce106d30cb37c4642900cccaffected
248f219cb8bcbfbd7f132752d44afa2df7c241d1< 0eef29385d715d4c7fd707b18d4a9b76c76dd5e6affected
248f219cb8bcbfbd7f132752d44afa2df7c241d1< efc1b2b7c1a308b60df8f36bc2d7ce16d3999364affected
248f219cb8bcbfbd7f132752d44afa2df7c241d1< d1ff5f9d2c5405681457262e23c720b08977c11faffected
248f219cb8bcbfbd7f132752d44afa2df7c241d1< 2c2e9ebeb036f9b1b09325ec5cfdfe0e78f357c3affected
248f219cb8bcbfbd7f132752d44afa2df7c241d1< 880a88f318cf1d2a0f4c0a7ff7b07e2062b434a4affected
… +10 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-38514

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
rxrpc: Fix oops due to non-existence of prealloc backlog struct
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix oops due to non-existence of prealloc backlog struct If an AF_RXRPC service socket is opened and bound, but calls are preallocated, then rxrpc_alloc_incoming_call() will oops because the rxrpc_backlog struct doesn't get allocated until the first preallocation is made. Fix this by returning NULL from rxrpc_alloc_incoming_call() if there is no backlog struct. This will cause the incoming call to be aborted.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于rxrpc在预分配积压结构不存在时崩溃，可能导致调用中止。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 248f219cb8bcbfbd7f132752d44afa2df7c241d1 ~ bf0ca6a1bc4fb904b598137c6718785a107e3adf -
LinuxLinux 4.9 -

II. Public POCs for CVE-2025-38514

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-38514

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-08-16 · 59 CVEs total

CVE-2025-38520drm/amdkfd: Don't call mmput from MMU notifier callback
CVE-2025-38507HID: nintendo: avoid bluetooth suspend/resume stalls
CVE-2025-38504io_uring/zcrx: fix pp destruction warnings
CVE-2025-38505wifi: mwifiex: discard erroneous disassoc frames on STA interface
CVE-2025-38506KVM: Allow CPU to reschedule while setting per-page memory attributes
CVE-2025-38503btrfs: fix assertion when building free space tree
CVE-2025-38516pinctrl: qcom: msm: mark certain pins as invalid for interrupts
CVE-2025-38517lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users()
CVE-2025-38518x86/CPU/AMD: Disable INVLPGB on Zen2
CVE-2025-38519mm/damon: fix divide by zero in damon_get_intervals_score()
CVE-2025-38515drm/sched: Increment job count before swapping tail spsc queue
CVE-2025-38521drm/imagination: Fix kernel crash when hard resetting the GPU
CVE-2025-38522sched/ext: Prevent update_locked_rq() calls with NULL rq
CVE-2025-38523cifs: Fix the smbd_response slab to allow usercopy
CVE-2025-38524rxrpc: Fix recv-recv race of completed call
CVE-2025-38525rxrpc: Fix irq-disabled in local_bh_enable()
CVE-2025-38526ice: add NULL check in eswitch lag check
CVE-2025-38527smb: client: fix use-after-free in cifs_oplock_break
CVE-2025-38528bpf: Reject %p% format string in bprintf-like helpers
CVE-2025-38529comedi: aio_iiro_16: Fix bit shift out of bounds

Showing top 20 of 59 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-38514

No comments yet

Leave a comment