CVE-2025-38587

MEDIUM

Linux Kernel - Infinite Loop in fib6_info_uses_dev()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_info_uses_dev() fib6_info_uses_dev() seems to rely on RCU without an explicit protection. Like the prior fix in rt6_nlmsg_size(), we need to make sure fib6_del_route() or fib6_add_rt2node() have not removed the anchor from the list, or we risk an infinite loop.

References (7)

Core 7

Scores

CVSS v3 5.5
EPSS 0.0015
EPSS Percentile 4.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-835
Status published
Products (25)
debian/debian_linux 11.0
linux/Kernel < 6.1.148linux
linux/Kernel 6.13.0 - 6.16.1linux
linux/Kernel 6.2.0 - 6.6.102linux
linux/Kernel 6.7.0 - 6.12.42linux
Linux/Linux < 6.13
Linux/Linux 11edcd026012ac18acee0f1514db3ed1b160fc6f
Linux/Linux 34a949e7a0869dfa31a40416d2a56973fae1807b - db65739d406c72776fbdbbc334be827ef05880d2
Linux/Linux 52da02521ede55fb86546c3fffd9377b3261b91f - 9cb6de8ee144a94ae7a40bdb32560329ab7276f0
Linux/Linux 6.1.128 - 6.1.148
... and 15 more
Published Aug 19, 2025
Tracked Since Feb 18, 2026