PT-2025-28876 · Linux+5 · Linux Kernel+5

Published 2025-06-19 · Updated 2026-05-07 · CVE-2025-38248

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel bridge component contains a flaw related to multicast router port configuration. Specifically, when per-VLAN multicast snooping is enabled or disabled, ports can be incorrectly re-added to global or per-VLAN router port lists even after being deleted. This can lead to a use-after-free condition when these lists are traversed, such as when adding new ports. The issue stems from incomplete removal of ports from the relevant router port lists during port or VLAN deletion.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Use After Free

Weakness Enumeration

CWE-119

CWE-416

Related Identifiers

ALSA-2026:3083

ALSA-2026:3110

AZL-70492

BDU:2025-09588

CVE-2025-38248

ECHO-7268-5DD6-EC0C

OESA-2025-2077

OESA-2025-2078

OESA-2025-2079

RHSA-2026:3083

RHSA-2026:3110

RHSA-2026:5197

RHSA-2026:5692

RHSA-2026:6193

RHSA-2026:6954

RHSA-2026:6961

RHSA-2026:7013

RHSA-2026:7100

RHSA-2026:9512

RHSA-2026:9644

SUSE-SU-2025:02853-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:02969-1

SUSE-SU-2025:02996-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:03023-1

SUSE-SU-2025:20577-1

SUSE-SU-2025:20586-1

SUSE-SU-2025:20601-1

SUSE-SU-2025:20602-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02969-1

SUSE-SU-2025_02996-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

SUSE-SU-2025_03023-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8033-1

USN-8033-2

USN-8033-3

USN-8033-4

USN-8033-5

USN-8033-6

USN-8033-7

USN-8033-8

USN-8034-1

USN-8034-2

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

USN-8141-1

USN-8163-1

USN-8163-2

USN-8243-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 2685

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38248.json · Exploit
• https://ubuntu.com/security/CVE-2025-68237 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38279 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38242 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22125 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-38248 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39746 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38439 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38006 · Security Note
• https://ubuntu.com/security/CVE-2025-39675 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38465 · Security Note
• https://ubuntu.com/security/CVE-2025-40323 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38169 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38068 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7833-1 · Vendor Advisory