CVE-2025-22004

A flaw was found in the Linux kernel's Asynchronous Transfer Mode (ATM) networking subsystem. The lec_send() function in the LAN Emulation driver attempts to read packet data after the network buffer has already been freed. A local attacker could exploit this use-after-free vulnerability to achieve privilege escalation or cause a Denial of Service (DoS) by crashing the system.

This vulnerability is rated as having Moderate impact because exploitation requires local access and the configuration of legacy Asynchronous Transfer Mode (ATM) LAN Emulation devices, which are absent in standard enterprise deployments. Although triggering the use-after-free condition could result in memory corruption leading to system instability or privilege escalation, exploitation demands specific interface configurations and precise execution timing. Default installations of Red Hat Enterprise Linux do not actively configure ATM LANE devices, substantially limiting practical exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.