PT-2025-35956 · Linux +1 · Linux Kernel +1

Published

2025-09-04

·

Updated

2025-09-04

·

CVE-2025-38683

Report an issue

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

**Name of the Vulnerable Software and Affected Versions:**

Linux kernel versions prior to 6.16.0-rc4+ #3

**Description:**

A flaw exists in the Linux kernel’s `hv netvsc` component where a panic can occur during namespace deletion with Virtual Functions (VF). The issue arises from moving a VF NIC to a new namespace during `NETDEV REGISTER` on a netvsc NIC. During namespace deletion, the `default device exit batch()` function, specifically `default device exit net()`, fails to detect the end of a list, leading to a NULL pointer dereference.

**Recommendations:**

Update to Linux kernel version 6.16.0-rc4+ #3 or a later version to resolve this issue.

Related Identifiers

CVE-2025-38683

Affected Products

Debian
Linux Kernel