Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-39702

ipv6: sr: Fix MAC comparison to be constant-time

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bf355b8d2c30a289232042cacc1cfaea4923936c to < ff55a452d56490047f5233cc48c5d933f8586884affected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < 3b348c9c8d2ca2c67559ffd0e258ae7e1107d4f0affected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < 86b6d34717fe0570afce07ee79b8eeb40341f831affected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < 3ddd55cf19ed6cc62def5e3af10c2a9df1b861c3affected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < b3967c493799e63f648e9c7b6cb063aa2aed04e7affected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < f7878d47560d61e3f370aca3cebb8f42a55b990aaffected
  • bf355b8d2c30a289232042cacc1cfaea4923936c to < a458b2902115b26a25d67393b12ddd57d1216aaaaffected

Linux Linux

Default version status: affected

  • 4.10affected
  • 0 to < 4.10unaffected
  • 5.10.249 to ≤ 5.10.*unaffected
  • 5.15.190 to ≤ 5.15.*unaffected
  • 6.1.149 to ≤ 6.1.*unaffected
  • 6.6.103 to ≤ 6.6.*unaffected
  • 6.12.44 to ≤ 6.12.*unaffected
  • 6.16.4 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References