CVE-2025-22004
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Apr 3, 2025
Updated: Apr 10, 2025
CWE ID 416
Summary
CVE-2025-22004 is a recently identified vulnerability affecting the Linux kernel. This issue involves a use-after-free condition in the net: atm: lec_send() function. The vulnerability arises when the length of an skb (Socket Buffer) is saved after being freed, leading to potential memory corruption and unintended program behavior. By exploiting this weakness, an attacker could execute arbitrary code or cause a denial-of-service condition. The affected Linux kernel versions have been patched to resolve this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.