PT-2025-32684 · Linux+9 · Linux Kernel+9
Publicado
2025-07-03
·
Atualizado
2026-04-20
·
CVE-2025-38500
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.15.0
Description:
A use-after-free vulnerability exists in the Linux kernel related to xfrm interfaces and the
collect md property. Specifically, the vulnerability occurs when changing an xfrm interface with the collect md property set, potentially leading to a double free when the network namespace is taken down. This issue arises because the check to enforce restrictions on changing collect md interfaces was not consistently applied, allowing an erroneous placement of the special interface in the xfrmi net hash.Recommendations:
Update to Linux kernel version 6.15.0 or later to address this vulnerability.
Exploit
Correção
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Almalinux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu