CVE-2025-38514

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix oops due to non-existence of prealloc backlog struct

If an AF_RXRPC service socket is opened and bound, but calls are preallocated, then rxrpc_alloc_incoming_call() will oops because the rxrpc_backlog struct doesn't get allocated until the first preallocation is made.

Fix this by returning NULL from rxrpc_alloc_incoming_call() if there is no backlog struct. This will cause the incoming call to be aborted.

This vulnerability is rated as Moderate severity because triggering the issue requires a distinct precondition: an application must actively initialize and bind an AF_RXRPC listening socket without configuring call preallocation. Although incoming network packets directed to that bound socket can cause a kernel crash and system denial of service, RxRPC protocol support is not utilized by default configurations in Red Hat Enterprise Linux. As a result, typical installations that do not run AFS or custom RxRPC network services are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.