CVE-2025-38550: ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
Published Aug 16, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
ipv6: mcast: Delay put pmc->idev in mlddeldelrec()
pmc->idev is still used in ip6mcclearsrc(), so as mldcleardelrec() does, the reference should be put after ip6mcclearsrc() return.
Affected Software
16 affected componentsFixes available
Linux Kernel
Linux Linux kernel>=5.13<5.15.190
Linux Linux kernel>=5.16<6.1.147
Linux Linux kernel>=6.2<6.6.100
Linux Linux kernel>=6.7<6.12.40
Linux Linux kernel>=6.13<6.15.8
Linux Linux kernel=6.16-rc1
Linux Linux kernel=6.16-rc2
Linux Linux kernel=6.16-rc3
Linux Linux kernel=6.16-rc4
Linux Linux kernel=6.16-rc5
Linux Linux kernel=6.16-rc6
Debian Debian Linux=11.0
Microsoft azl3 kernel 6.6.96.2-2
Microsoft cbl2 kernel 5.15.186.1-1
Microsoft azl3 kernel 6.6.96.2-1
Event History
Aug 16, 2025
CVE Published
via MITRE·11:34 AM
Data Sourced
via MITRE·11:34 AM
DescriptionSeverity
Data Sourced
via Red Hat·12:02 PM
DescriptionSeverityAffected Software
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityAffected Software
Sep 4, 2025
Data Sourced
via Microsoft·12:35 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·07:35 AM
DescriptionSeverity
Updated
via Microsoft·07:35 AM
SeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-38550?
The severity of CVE-2025-38550 is classified as medium.
2
How do I fix CVE-2025-38550?
To fix CVE-2025-38550, update the Linux kernel to the latest patched version.
3
What is the impact of CVE-2025-38550 on affected systems?
CVE-2025-38550 may lead to potential memory management issues in the Linux kernel.
4
In which versions of the Linux kernel does CVE-2025-38550 exist?
CVE-2025-38550 affects multiple versions of the Linux kernel that handle IPV6 multicast.
5
What components of the Linux kernel are affected by CVE-2025-38550?
CVE-2025-38550 specifically affects the IPV6 multicast implementation in the Linux kernel.