PT-2025-32684 · Linux+9 · Linux Kernel+9
Published
2025-07-03
·
Updated
2026-04-20
·
CVE-2025-38500
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.15.0
Description:
A use-after-free vulnerability exists in the Linux kernel related to xfrm interfaces and the
collect md property. Specifically, the vulnerability occurs when changing an xfrm interface with the collect md property set, potentially leading to a double free when the network namespace is taken down. This issue arises because the check to enforce restrictions on changing collect md interfaces was not consistently applied, allowing an erroneous placement of the special interface in the xfrmi net hash.Recommendations:
Update to Linux kernel version 6.15.0 or later to address this vulnerability.
Exploit
Fix
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu