01 Record

CVE-2025-38666

net: appletalk: Fix use-after-free in AARP proxy probe

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net: appletalk: Fix use-after-free in AARP proxy probe

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 6.5% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-08-22 16:02Z1 YR AGO

Last updated

2026-05-11 21:32Z5 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

cd3b3b0b1f258495f38b980a1d014ca557faf8844139d4322dc3677f5a3b0414

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b35694ffabb2af308a1f725d70f60fd8a47d1f3e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 82d19a70ced28b17a38ebf1b6978c6c7db894979, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 186942d19c0222617ef61f50e1dba91e269a5963, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 2a6209e4649d45fd85d4193abc481911858ffc6f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e4f1564c5b699eb89b3040688fd6b4e57922f1f6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 5f02ea0f63dd38c41539ea290fcc1693c73aa8e5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f90b6bb203f3f38bf2b3d976113d51571df9a482, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 6c4a92d07b0850342d3becf2e608f805e972467c, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/b35694ffabb2af308a1f725d70f60fd8a47d1f3e
git.kernel.orghttps://git.kernel.org/stable/c/82d19a70ced28b17a38ebf1b6978c6c7db894979
git.kernel.orghttps://git.kernel.org/stable/c/186942d19c0222617ef61f50e1dba91e269a5963
git.kernel.orghttps://git.kernel.org/stable/c/2a6209e4649d45fd85d4193abc481911858ffc6f
git.kernel.orghttps://git.kernel.org/stable/c/e4f1564c5b699eb89b3040688fd6b4e57922f1f6
git.kernel.orghttps://git.kernel.org/stable/c/5f02ea0f63dd38c41539ea290fcc1693c73aa8e5
git.kernel.orghttps://git.kernel.org/stable/c/f90b6bb203f3f38bf2b3d976113d51571df9a482
git.kernel.orghttps://git.kernel.org/stable/c/6c4a92d07b0850342d3becf2e608f805e972467c
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.148-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.41-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.16.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.