Описание
In the Linux kernel, the following vulnerability has been resolved:
net: atm: fix use after free in lec_send()
The ->send() operation frees skb so save the length before calling
->send() to avoid a use after free.
A flaw was found in the Linux kernel's Asynchronous Transfer Mode (ATM) networking subsystem. The lec_send() function in the LAN Emulation driver attempts to read packet data after the network buffer has already been freed. A local attacker could exploit this use-after-free vulnerability to achieve privilege escalation or cause a Denial of Service (DoS) by crashing the system.
Отчет
This vulnerability is rated as having Moderate impact because exploitation requires local access and the configuration of legacy Asynchronous Transfer Mode (ATM) LAN Emulation devices, which are absent in standard enterprise deployments. Although triggering the use-after-free condition could result in memory corruption leading to system instability or privilege escalation, exploitation demands specific interface configurations and precise execution timing. Default installations of Red Hat Enterprise Linux do not actively configure ATM LANE devices, substantially limiting practical exposure.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Not affected | ||
| Red Hat Enterprise Linux 6 | kernel | Out of support scope | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Affected | ||
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | kernel-rt | Fixed | RHSA-2025:11375 | 17.07.2025 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | kernel | Fixed | RHSA-2025:11358 | 17.07.2025 |
| Red Hat Enterprise Linux 8 | kernel-rt | Fixed | RHSA-2025:11299 | 16.07.2025 |
| Red Hat Enterprise Linux 8 | kernel | Fixed | RHSA-2025:11298 | 16.07.2025 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | kernel | Fixed | RHSA-2025:12623 | 04.08.2025 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | kernel | Fixed | RHSA-2025:12238 | 30.07.2025 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | kernel | Fixed | RHSA-2025:12238 | 30.07.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
7 High
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.
In the Linux kernel, the following vulnerability has been resolved: n ...
In the Linux kernel, the following vulnerability has been resolved: net: atm: fix use after free in lec_send() The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.
EPSS
7 High
CVSS3