CVE-2025-22004: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-22004 is a use-after-free vulnerability discovered in the Linux kernel's ATM networking component, specifically in the lec_send() function. The vulnerability was disclosed on April 3, 2025, affecting multiple versions of the Linux kernel from 2.6.12 up to versions before 6.1.132, 6.13.9, and other specified versions (NVD).

The vulnerability occurs in the net/atm subsystem where the ->send() operation frees the socket buffer (skb) before its length can be properly accessed, leading to a use-after-free condition. This vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access requirements with high impact potential. The weakness is categorized as CWE-416 (Use After Free) (NVD).

The vulnerability affects multiple versions of the Linux kernel and could potentially lead to high-severity impacts on system confidentiality, integrity, and availability when successfully exploited. The CVSS score of 7.8 indicates significant potential for system compromise if exploited (NVD).

The vulnerability requires local access with low attack complexity and privileged access to exploit. No user interaction is needed for exploitation, as indicated by the CVSS vector string (NVD).

Multiple patches have been released to address this vulnerability across different kernel versions. The fix involves properly saving the length before calling the ->send() operation. Fixed versions include Linux kernel 6.1.133 for bookworm and 6.12.22 for sid (Debian).