Answer in brief
CVE-2025-38542 records a Unknown severity vulnerability in net: appletalk: Fix device refcount leak in atrtr_create(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2025-38542 records a Unknown severity vulnerability in net: appletalk: Fix device refcount leak in atrtr_create(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <b92bedf71f25303e203a4e657489d76691a58119 || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <a7852b01793669248dce0348d14df89e77a32afd || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <b2f5dfa87367fdce9f8b995bc6c38f64f9ea2c90 || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <d2e9f50f0bdad73b64a871f25186b899624518c4 || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <4a17370da6e476d3d275534e9e9cd2d02c57ca46 || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <473f3eadfc73b0fb6d8dee5829d19a5772e387f7 || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <64124cf0aab0dd1e18c0fb5ae66e45741e727f8b || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <711c80f7d8b163d3ecd463cd96f07230f488e750 | b92bedf71f25303e203a4e657489d76691a58119, a7852b01793669248dce0348d14df89e77a32afd, b2f5dfa87367fdce9f8b995bc6c38f64f9ea2c90, d2e9f50f0bdad73b64a871f25186b899624518c4, 4a17370da6e476d3d275534e9e9cd2d02c57ca46, 473f3eadfc73b0fb6d8dee5829d19a5772e387f7, 64124cf0aab0dd1e18c0fb5ae66e45741e727f8b, 711c80f7d8b163d3ecd463cd96f07230f488e750 |
| Linux/Linuxgeneric | 2.6.12 | Not reported |
Published upstream
Aug 16, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtr_create() When updating an existing route entry in atrtr_create(), the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix this by calling dev_put() to release the old device reference before holding the new one.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <b92bedf71f25303e203a4e657489d76691a58119 || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <a7852b01793669248dce0348d14df89e77a32afd || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <b2f5dfa87367fdce9f8b995bc6c38f64f9ea2c90 || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <d2e9f50f0bdad73b64a871f25186b899624518c4 || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <4a17370da6e476d3d275534e9e9cd2d02c57ca46 || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <473f3eadfc73b0fb6d8dee5829d19a5772e387f7 || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <64124cf0aab0dd1e18c0fb5ae66e45741e727f8b || >=c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d <711c80f7d8b163d3ecd463cd96f07230f488e750 | b92bedf71f25303e203a4e657489d76691a58119, a7852b01793669248dce0348d14df89e77a32afd, b2f5dfa87367fdce9f8b995bc6c38f64f9ea2c90, d2e9f50f0bdad73b64a871f25186b899624518c4, 4a17370da6e476d3d275534e9e9cd2d02c57ca46, 473f3eadfc73b0fb6d8dee5829d19a5772e387f7, 64124cf0aab0dd1e18c0fb5ae66e45741e727f8b, 711c80f7d8b163d3ecd463cd96f07230f488e750 |
| Linux/Linuxgeneric | 2.6.12 | Not reported |
Published upstream
Aug 16, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtr_create() When updating an existing route entry in atrtr_create(), the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix this by calling dev_put() to release the old device reference before holding the new one.
Quoted source text, attributed separately from HOL analysis.