CVE-2025-38587

ipv6: fix possible infinite loop in fib6_info_uses_dev()

published August 19, 2025

CVSS
—
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix possible infinite loop in fib6_info_uses_dev()

fib6_info_uses_dev() seems to rely on RCU without an explicit

protection.

Like the prior fix in rt6_nlmsg_size(),

we need to make sure fib6_del_route() or fib6_add_rt2node()

have not removed the anchor from the list, or we risk an infinite loop.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.7th percentile
Published
2025-08-19T17:03Z
EPSS history
Timeline
  • 19 AUG 17:03Z
    ipv6: fix possible infinite loop in fib6_info_uses_dev()
    cvelistv5