← Database

CVE-2025-38587

MEDIUM CVSS: 5.5 Published: 2025-08-19 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_info_uses_dev() fib6_info_uses_dev() seems to rely on RCU without an explicit protection. Like the prior fix in rt6_nlmsg_size(), we need to make sure fib6_del_route() or fib6_add_rt2node() have not removed the anchor from the list, or we risk an infinite loop.

Affected Platforms

Linux Linux KernelDebian Debian Linux

Weakness Type

CWE-835

References