CVE-2025-38587

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_info_uses_dev() fib6_info_uses_dev() seems to rely on RCU without an explicit protection. Like the prior fix in rt6_nlmsg_size(), we need to make sure fib6_del_route() or fib6_add_rt2node() have not removed the anchor from the list, or we risk an infinite loop.

Rincian

Terbit di NVD

19 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/16d21816c0918f8058b5fc14cbe8595d62046e2d patch
• https://git.kernel.org/stable/c/9cb6de8ee144a94ae7a40bdb32560329ab7276f0 patch
• https://git.kernel.org/stable/c/bc85e62394f008fa848c4ba02c936c735a3e8ef5 patch
• https://git.kernel.org/stable/c/db65739d406c72776fbdbbc334be827ef05880d2 patch
• https://git.kernel.org/stable/c/e09be457b71b983a085312ff9e981f51e4ed3211 patch
• https://git.kernel.org/stable/c/f8d8ce1b515a0a6af72b30502670a406cfb75073 patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html advisory pihak ketiga