High 7.5Published Aug 16, 2025

CVE-2025-38514rxrpc: Fix oops due to non-existence of prealloc backlog struct

Updated under an hour ago (Oct 27, 2026, 5:30 AM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix oops due to non-existence of prealloc backlog struct If an AF_RXRPC service socket is opened and bound, but calls are preallocated, then rxrpc_alloc_incoming_call() will oops because the rxrpc_backlog struct doesn't get allocated until the first preallocation is made. Fix this by returning NULL from rxrpc_alloc_incoming_call() if there is no backlog struct. This will cause the incoming call to be aborted.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 248f219cb8bcbfbd7f132752d44afa2df7c241d1 before bf0ca6a1bc4fb904b598137c6718785a107e3adf; from 248f219cb8bcbfbd7f132752d44afa2df7c241d1 before f7afb3ff01c42c49e8a143cdce400b95844bb506; from 248f219cb8bcbfbd7f132752d44afa2df7c241d1 before f5e72b7824d08c206ce106d30cb37c4642900ccc; 248f219cb8bcbfbd7f132752d44afa2df7c241d1 builds before 0eef29385d715d4c7fd707b18d4a9b76c76dd5e6; from 248f219cb8bcbfbd7f132752d44afa2df7c241d1 before efc1b2b7c1a308b60df8f36bc2d7ce16d3999364; from 248f219cb8bcbfbd7f132752d44afa2df7c241d1 before d1ff5f9d2c5405681457262e23c720b08977c11f; 248f219cb8bcbfbd7f132752d44afa2df7c241d1 builds before 2c2e9ebeb036f9b1b09325ec5cfdfe0e78f357c3; from 248f219cb8bcbfbd7f132752d44afa2df7c241d1 before 880a88f318cf1d2a0f4c0a7ff7b07e2062b434a4	CNA record
linux linux_kernel linux:linux_kernel	from 4.9 before 5.4.296; from 5.5 before 5.10.240; from 5.11 before 5.15.189; from 5.16 before 6.1.146; from 6.2 before 6.6.99; from 6.7 before 6.12.39; from 6.13 before 6.15.7; 6.16; and 4 more ranges	NVD
debian debian_linux debian:debian_linux	11.0	NVD

References

References

https://git.kernel.org/stable/c/bf0ca6a1bc4fb904b598137c6718785a107e3adf	patch
https://git.kernel.org/stable/c/f7afb3ff01c42c49e8a143cdce400b95844bb506	patch
https://git.kernel.org/stable/c/f5e72b7824d08c206ce106d30cb37c4642900ccc	patch
https://git.kernel.org/stable/c/0eef29385d715d4c7fd707b18d4a9b76c76dd5e6	patch
https://git.kernel.org/stable/c/efc1b2b7c1a308b60df8f36bc2d7ce16d3999364	patch
https://git.kernel.org/stable/c/d1ff5f9d2c5405681457262e23c720b08977c11f	patch
https://git.kernel.org/stable/c/2c2e9ebeb036f9b1b09325ec5cfdfe0e78f357c3	patch
https://git.kernel.org/stable/c/880a88f318cf1d2a0f4c0a7ff7b07e2062b434a4	patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html	third-party-advisory
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.