CVE-2025-38310: seg6: Fix validation of nexthop addresses
In the Linux kernel, the following vulnerability has been resolved:
seg6: Fix validation of nexthop addresses
The kernel currently validates that the length of the provided nexthop address does not exceed the specified length. This can lead to the kernel reading uninitialized memory if user space provided a shorter length than the specified one.
Fix by validating that the provided length exactly matches the specified one.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38310?
CVE-2025-38310 has a medium severity rating due to its potential impact on kernel memory access.
How do I fix CVE-2025-38310?
To address CVE-2025-38310, update the Linux kernel to a version where this vulnerability has been patched.
What systems are affected by CVE-2025-38310?
CVE-2025-38310 affects all versions of the Linux kernel that have not been updated to include the fix.
Can CVE-2025-38310 lead to exploitation?
Yes, CVE-2025-38310 can lead to exploitation by allowing unauthorized access to memory, which may compromise system stability.
Is there a workaround for CVE-2025-38310?
There are no known effective workarounds for CVE-2025-38310, so applying the official kernel update is recommended.