VULNERABILITY INTELLIGENCE

CVE-2025-38587

CVSS score5.5 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-08-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_info_uses_dev() fib6_info_uses_dev() seems to rely on RCU without an explicit protection. Like the prior fix in rt6_nlmsg_size(), we need to make sure fib6_del_route() or fib6_add_rt2node() have not removed the anchor from the list, or we risk an infinite loop.

Weakness classification

  • nvd@nist.gov: CWE-835

Primary references