Critical Vulnerability in Linux Kernel: AF_RXRPC Service Socket Oops Issue
Summary
CVE-2025-38514: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix oops due to non-existence of prealloc backlog struct If an AF_RXRPC service socket is opened and bound, but calls are preallocated, then rxrp... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is known for its stability, performance, and security features. However, vulnerabilities can arise, impacting its functionality and security. This specific vulnerability affects the AF_RXRPC service socket, which is used for remote procedure calls over a network, highlighting the need for constant vigilance in maintaining kernel integrity.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the AF_RXRPC service socket handling. When an AF_RXRPC service socket is opened and bound, but calls are preallocated, the function rxrpc_alloc_incoming_call() can lead to a system crash (oops) because the necessary rxrpc_backlog struct is not allocated until the first preallocation occurs. This can result in unexpected behavior and potential service disruptions, making it critical to address this issue promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it is available to mitigate risks.
Conclusion
The identified vulnerability in the Linux kernel regarding AF_RXRPC service sockets poses a significant risk to system stability and security. It is essential for users to apply the necessary patches and remain vigilant in monitoring their systems for potential vulnerabilities.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system crashes when handling AF_RXRPC service sockets, potentially disrupting services and affecting system stability.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, patches are available for Debian 12 (version 6.1.147-1) and Debian 13 (version 6.12.41-1).
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to mitigate risks associated with this vulnerability.
Detailed information can be found in the CVE database or through the official Linux kernel documentation.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
