CVE-2025-62525

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, local users could read and write arbitrary kernel memory using the ioctls of the ltq-ptm driver which is used to drive the datapath of the DSL line. This only effects the lantiq target supporting xrx200, danube and amazon SoCs from Lantiq/Intel/MaxLinear with the DSL in PTM mode. The DSL driver for the VRX518 is not affected. ATM mode is also not affected. Most VDSL lines use PTM mode and most ADSL lines use ATM mode. OpenWrt is normally running as a single user system, but some services are sandboxed. This vulnerability could allow attackers to escape a ujail sandbox or other contains. This is fixed in OpenWrt 24.10.4. There are no workarounds.

• CWE-20
• CWE-125
• CWE-787

• https://github.com/openwrt/openwrt/commit/2a76abc5442e3f74d95b4caa9bb57e5488fc132ePatch
• https://github.com/openwrt/openwrt/commit/e001b31163a77683ee741d169f794cfa50926f37Patch
• https://github.com/openwrt/openwrt/security/advisories/GHSA-h427-frpr-7cqrPatch, Vendor Advisory
• https://openwrt.org/advisory/2025-10-22-2Vendor Advisory

Published

Oct 22, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6252The Qi Addons For Elementor plugin for WordPress is vulnerab…5.4
• CVE-2025-62520Mantis Bug Tracker (MantisBT) is an open source issue tracke…4.3
• CVE-2025-62521ChurchCRM is an open-source church management system. Prior …9.8
• CVE-2025-62522Vite is a frontend tooling framework for JavaScript. In vers…6
• CVE-2025-62523PILOS (Platform for Interactive Live-Online Seminars) is a f…6.3
• CVE-2025-62524PILOS (Platform for Interactive Live-Online Seminars) is a f…5.3
• CVE-2025-62526OpenWrt Project is a Linux operating system targeting embedd…7.8
• CVE-2025-62527Taguette is an open source qualitative research tool. An iss…7.1
• CVE-2025-62528Taguette is an open source qualitative research tool. An iss…5.4
• CVE-2025-6253The UiCore Elements – Free Elementor widgets and templates p…7.5
• CVE-2025-6254The Doctreat Core plugin for WordPress is vulnerable to Priv…9.8
• CVE-2025-62549Untrusted pointer dereference in Windows Routing and Remote …8.8