01 Record

CVE-2025-38514

rxrpc: Fix oops due to non-existence of prealloc backlog struct

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

rxrpc: Fix oops due to non-existence of prealloc backlog struct

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.35% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 27.9% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-08-16 10:55Z1 YR AGO

Last updated

2026-08-05 12:02Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-253Incorrect Check of Function Return ValueBase

Data version

5.2

Document digest

a9edf05b1e46c012cc77b5986902f51fdd329e1923694e32044007a1247d1f84

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux248f219cb8bcbfbd7f132752d44afa2df7c241d1 to < bf0ca6a1bc4fb904b598137c6718785a107e3adf, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to < f7afb3ff01c42c49e8a143cdce400b95844bb506, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to < f5e72b7824d08c206ce106d30cb37c4642900ccc, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to < 0eef29385d715d4c7fd707b18d4a9b76c76dd5e6, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to < efc1b2b7c1a308b60df8f36bc2d7ce16d3999364, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to < d1ff5f9d2c5405681457262e23c720b08977c11f, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to < 2c2e9ebeb036f9b1b09325ec5cfdfe0e78f357c3, 248f219cb8bcbfbd7f132752d44afa2df7c241d1 to < 880a88f318cf1d2a0f4c0a7ff7b07e2062b434a4, 4.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/bf0ca6a1bc4fb904b598137c6718785a107e3adf
git.kernel.orghttps://git.kernel.org/stable/c/f7afb3ff01c42c49e8a143cdce400b95844bb506
git.kernel.orghttps://git.kernel.org/stable/c/f5e72b7824d08c206ce106d30cb37c4642900ccc
git.kernel.orghttps://git.kernel.org/stable/c/0eef29385d715d4c7fd707b18d4a9b76c76dd5e6
git.kernel.orghttps://git.kernel.org/stable/c/efc1b2b7c1a308b60df8f36bc2d7ce16d3999364
git.kernel.orghttps://git.kernel.org/stable/c/d1ff5f9d2c5405681457262e23c720b08977c11f
git.kernel.orghttps://git.kernel.org/stable/c/2c2e9ebeb036f9b1b09325ec5cfdfe0e78f357c3
git.kernel.orghttps://git.kernel.org/stable/c/880a88f318cf1d2a0f4c0a7ff7b07e2062b434a4
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38514

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38514

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References