CVE-2025-38248: bridge: mcast: Fix use-after-free during router port configuration
bridge: mcast: Fix use-after-free during router port configuration
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 5.15.224 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.122 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.67 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.15.5 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.69-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.16.3-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.14-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38248?
CVE-2025-38248 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2025-38248?
To fix CVE-2025-38248, update your Linux kernel to the latest stable version provided by your distribution.
What is the impact of CVE-2025-38248?
CVE-2025-38248 may lead to a use-after-free condition during multicast router port configuration, potentially causing system instability.
Which versions of the Linux kernel are affected by CVE-2025-38248?
CVE-2025-38248 affects various versions of the Linux kernel prior to the fix being applied.
Is CVE-2025-38248 related to any specific Linux subsystems?
CVE-2025-38248 is specifically related to the bridge subsystem in the Linux kernel, which handles multicast routing.