-

CVE-2025-38587

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix possible infinite loop in fib6_info_uses_dev()

fib6_info_uses_dev() seems to rely on RCU without an explicit
protection.

Like the prior fix in rt6_nlmsg_size(),
we need to make sure fib6_del_route() or fib6_add_rt2node()
have not removed the anchor from the list, or we risk an infinite loop.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < bc85e62394f008fa848c4ba02c936c735a3e8ef5
Version d0ec61c9f3583b76aebdbb271f5c0d3fcccd48b2
Status affected
Version < 9cb6de8ee144a94ae7a40bdb32560329ab7276f0
Version 52da02521ede55fb86546c3fffd9377b3261b91f
Status affected
Version < db65739d406c72776fbdbbc334be827ef05880d2
Version 34a949e7a0869dfa31a40416d2a56973fae1807b
Status affected
Version < 16d21816c0918f8058b5fc14cbe8595d62046e2d
Version d9ccb18f83ea2bb654289b6ecf014fd267cc988b
Status affected
Version < e09be457b71b983a085312ff9e981f51e4ed3211
Version d9ccb18f83ea2bb654289b6ecf014fd267cc988b
Status affected
Version < f8d8ce1b515a0a6af72b30502670a406cfb75073
Version d9ccb18f83ea2bb654289b6ecf014fd267cc988b
Status affected
Version 11edcd026012ac18acee0f1514db3ed1b160fc6f
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.13
Status affected
Version < 6.13
Version 0
Status unaffected
Version <= 6.1.*
Version 6.1.148
Status unaffected
Version <= 6.6.*
Version 6.6.102
Status unaffected
Version <= 6.12.*
Version 6.12.42
Status unaffected
Version <= 6.15.*
Version 6.15.10
Status unaffected
Version <= 6.16.*
Version 6.16.1
Status unaffected
Version <= *
Version 6.17-rc1
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.089
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String