PT-2025-33786 · Linux+6 · Linux Kernel+6

Published 2025-07-25 · Updated 2026-04-20 · CVE-2025-38588

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a flaw within the rt6 nlmsg size() function related to IPv6. A previous patch introduced an infinite loop under specific conditions when using list del rcu(), potentially confusing RCU readers due to inconsistencies in the list head. This issue occurs during route deletion and addition operations.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

BDU:2025-14977

CVE-2025-38588

DLA-4328-1

ECHO-5C31-E40C-29D3

MGASA-2025-0234

MGASA-2025-0235

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03272-1

SUSE-SU-2025:03290-1

SUSE-SU-2025:03301-1

SUSE-SU-2025:03382-1

SUSE-SU-2025:03602-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20653-1

SUSE-SU-2025:20669-1

SUSE-SU-2025:20739-1

SUSE-SU-2025:20756-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_03272-1

SUSE-SU-2025_03290-1

SUSE-SU-2025_03301-1

SUSE-SU-2025_03382-1

SUSE-SU-2026:0144-1

SUSE-SU-2026:0148-1

SUSE-SU-2026:0171-1

SUSE-SU-2026:0262-1

SUSE-SU-2026:0269-1

SUSE-SU-2026:0270-1

SUSE-SU-2026:0274-1

SUSE-SU-2026:0283-1

SUSE-SU-2026:0284-1

SUSE-SU-2026:20149-1

SUSE-SU-2026:20164-1

SUSE-SU-2026:20169-1

SUSE-SU-2026:20248-1

SUSE-SU-2026:20249-1

SUSE-SU-2026:20250-1

SUSE-SU-2026:20251-1

SUSE-SU-2026:20252-1

SUSE-SU-2026:20253-1

SUSE-SU-2026:20255-1

SUSE-SU-2026:20256-1

SUSE-SU-2026:20257-1

SUSE-SU-2026:20258-1

SUSE-SU-2026:20259-1

SUSE-SU-2026:20265-1

SUSE-SU-2026:20266-1

SUSE-SU-2026:20271-1

SUSE-SU-2026:20272-1

SUSE-SU-2026:20273-1

SUSE-SU-2026:20274-1

SUSE-SU-2026:20275-1

SUSE-SU-2026:20276-1

SUSE-SU-2026:20376-1

SUSE-SU-2026:20377-1

SUSE-SU-2026:20378-1

SUSE-SU-2026:20379-1

SUSE-SU-2026:20380-1

SUSE-SU-2026:20385-1

SUSE-SU-2026:20386-1

SUSE-SU-2026:20387-1

SUSE-SU-2026:20388-1

SUSE-SU-2026:20389-1

SUSE-SU-2026:20390-1

SUSE-SU-2026:20391-1

SUSE-SU-2026:20392-1

SUSE-SU-2026:20393-1

SUSE-SU-2026:20394-1

SUSE-SU-2026:20395-1

SUSE-SU-2026:20396-1

SUSE-SU-2026:20397-1

SUSE-SU-2026:20400-1

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7934-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3188

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38588.json · Exploit
• https://ubuntu.com/security/CVE-2025-38145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40238 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38714 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40169 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40105 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38474 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40070 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40281 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38695 · Vendor Advisory