PT-2025-27967 · Linux+4 · Linux Kernel+4
Published
2025-06-09
·
Updated
2026-04-20
·
CVE-2025-38192
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A vulnerability in the Linux kernel can cause a kernel crash when a not-so-careful NAT46 BPF program indiscriminately flips ingress packets from IPv4 to IPv6. This issue occurs because the
dst is not cleared when the protocol is changed, resulting in a NULL pointer dereference. The problem arises when the output interface has a 4->6 program attached at ingress and the multicast skb is looped back to the sending socket. The ip6 rcv core function tries to use skb dst(), but the dst is still an IPv4 one left after IPv4 mcast output.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu