Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38587

ipv6: fix possible infinite loop in fib6_info_uses_dev()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_info_uses_dev() fib6_info_uses_dev() seems to rely on RCU without an explicit protection. Like the prior fix in rt6_nlmsg_size(), we need to make sure fib6_del_route() or fib6_add_rt2node() have not removed the anchor from the list, or we risk an infinite loop.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d0ec61c9f3583b76aebdbb271f5c0d3fcccd48b2 to < bc85e62394f008fa848c4ba02c936c735a3e8ef5affected
  • 52da02521ede55fb86546c3fffd9377b3261b91f to < 9cb6de8ee144a94ae7a40bdb32560329ab7276f0affected
  • 34a949e7a0869dfa31a40416d2a56973fae1807b to < db65739d406c72776fbdbbc334be827ef05880d2affected
  • d9ccb18f83ea2bb654289b6ecf014fd267cc988b to < 16d21816c0918f8058b5fc14cbe8595d62046e2daffected
  • d9ccb18f83ea2bb654289b6ecf014fd267cc988b to < e09be457b71b983a085312ff9e981f51e4ed3211affected
  • d9ccb18f83ea2bb654289b6ecf014fd267cc988b to < f8d8ce1b515a0a6af72b30502670a406cfb75073affected
  • 11edcd026012ac18acee0f1514db3ed1b160fc6faffected
  • 6.1.128 to < 6.1.148affected
  • 6.6.75 to < 6.6.102affected
  • 6.12.2 to < 6.12.42affected
  • 6.11.11 to < 6.12affected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.1.148 to ≤ 6.1.*unaffected
  • 6.6.102 to ≤ 6.6.*unaffected
  • 6.12.42 to ≤ 6.12.*unaffected
  • 6.15.10 to ≤ 6.15.*unaffected
  • 6.16.1 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References