01 Record

CVE-2025-39828

atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 6.5% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-16 13:00Z1 YR AGO

Last updated

2026-05-12 12:07Z5 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

a5750df877821acb4e4680bc4c702d6f1fcb406cb4e9be3b379badd072d1ad1b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b502f16bad8f0a4cfbd023452766f21bfda39dde, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 0a6a6d4fb333f7afe22e59ffed18511a7a98efc8, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 62f368472b0aa4b5d91d9b983152855c6b6d8925, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 51872b26429077be611b0a1816e0e722278015c3, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 3c80c230d6e3e6f63d43f4c3f0bb344e3e8b119b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 33f9e6dc66b32202b95fc861e6b3ea4b0c185b0b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 3ab9f5ad9baefe6d3d4c37053cdfca2761001dfe, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ec79003c5f9d2c7f9576fc69b8dbda80305cbe3a, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/b502f16bad8f0a4cfbd023452766f21bfda39dde
git.kernel.orghttps://git.kernel.org/stable/c/0a6a6d4fb333f7afe22e59ffed18511a7a98efc8
git.kernel.orghttps://git.kernel.org/stable/c/62f368472b0aa4b5d91d9b983152855c6b6d8925
git.kernel.orghttps://git.kernel.org/stable/c/51872b26429077be611b0a1816e0e722278015c3
git.kernel.orghttps://git.kernel.org/stable/c/3c80c230d6e3e6f63d43f4c3f0bb344e3e8b119b
git.kernel.orghttps://git.kernel.org/stable/c/33f9e6dc66b32202b95fc861e6b3ea4b0c185b0b
git.kernel.orghttps://git.kernel.org/stable/c/3ab9f5ad9baefe6d3d4c37053cdfca2761001dfe
git.kernel.orghttps://git.kernel.org/stable/c/ec79003c5f9d2c7f9576fc69b8dbda80305cbe3a
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.153-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.48-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.16.5-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.