PT-2025-22222 · Linux+6 · Linux Kernel+6
Published
2025-05-07
·
Updated
2026-04-20
·
CVE-2025-37961
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to the version that includes the fix for the uninit-value issue in do output route4
Description
A vulnerability has been resolved in the Linux kernel related to an uninit-value issue for the
saddr argument in the do output route4 function. This issue can prevent connecting the route. The problem arises because the code is still reading the saddr value even though it should be ignored according to a previous commit. The fix involves changing the argument to ret saddr.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for the uninit-value issue in
do output route4. As a temporary workaround, consider restricting the use of the do output route4 function until a patch is available.Exploit
Fix
Use of Uninitialized Resource
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu