PT-2025-27959 · Linux+6 · Linux Kernel+6
Published
2025-06-17
·
Updated
2026-04-20
·
CVE-2025-38184
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to the fixed version
Description:
A null pointer dereference issue has been identified in the Linux kernel when acquiring the remote IP of an Ethernet bearer. The issue can be reproduced by creating a tun interface, enabling the l2 bearer, and using the TIPC NL UDP GET REMOTEIP command with the media name set to tun. This can lead to a general protection fault. The issue arises when the bearer list may be NULL or other media when another thread changes it, specifically when bid != 0 && skip cnt != 0. The fix involves checking the media id to prevent this issue.
Recommendations:
For Linux kernel versions prior to the fixed version, apply the patch that fixes the null pointer dereference issue in the tipc udp nl dump remoteip function by checking the media id.
As a temporary workaround, consider restricting the use of the TIPC NL UDP GET REMOTEIP command until a patch is available.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu