CVE-2025-38192

BUG: kernel NULL pointer dereference, address: 0000000000000000 ip6rcvcore (net/ipv6/ip6input.c:190:20) ipv6rcv (net/ipv6/ip6input.c:306:8) processbacklog (net/core/dev.c:6186:4) napipoll (net/core/dev.c:6906:9) netrxaction (net/core/dev.c:7028:13) dosoftirq (kernel/softirq.c:462:3) netifrx (net/core/dev.c:5326:3) devloopbackxmit (net/core/dev.c:4015:2) ipmcfinishoutput (net/ipv4/ipoutput.c:363:8) NFHOOK (./include/linux/netfilter.h:314:9) ipmcoutput (net/ipv4/ipoutput.c:400:5) dstoutput (./include/net/dst.h:459:9) iplocalout (net/ipv4/ipoutput.c:130:9) ipsendskb (net/ipv4/ipoutput.c:1496:8) udpsendskb (net/ipv4/udp.c:1040:8) udp_sendmsg (net/ipv4/udp.c:1328:10)

The output interface has a 4->6 program attached at ingress. We try to loop the multicast skb back to the sending socket. Ingress BPF runs as part of netifrx(), pushes a valid v6 hdr and changes skb->protocol to v6. We enter ip6rcvcore which tries to use skbdst(). But the dst is still an IPv4 one left after IPv4 mcast output.

Clear the dst in all BPF helpers which change the protocol. Try to preserve metadata dsts, those may carry non-routing metadata.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6578171a7ff0c31dc73258f93da7407510abf085

Fixed

bfa4d86e130a09f67607482e988313430e38f6c4

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6578171a7ff0c31dc73258f93da7407510abf085

Fixed

2a3ad42a57b43145839f2f233fb562247658a6d9

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6578171a7ff0c31dc73258f93da7407510abf085

Fixed

e9994e7b9f7bbb882d13c8191731649249150d21

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

6578171a7ff0c31dc73258f93da7407510abf085

Fixed

ba9db6f907ac02215e30128770f85fbd7db2fcf9

Affected versions

v4.*

v4.10

v4.10-rc1

v4.10-rc2

v4.10-rc3

v4.10-rc4

v4.10-rc5

v4.10-rc6

v4.10-rc7

v4.10-rc8

v4.11

v4.11-rc1

v4.11-rc2

v4.11-rc3

v4.11-rc4

v4.11-rc5

v4.11-rc6

v4.11-rc7

v4.11-rc8

v4.12

v4.12-rc1

v4.12-rc2

v4.12-rc3

v4.12-rc4

v4.12-rc5

v4.12-rc6

v4.12-rc7

v4.13

v4.13-rc1

v4.13-rc2

v4.13-rc3

v4.13-rc4

v4.13-rc5

v4.13-rc6

v4.13-rc7

v4.14

v4.14-rc1

v4.14-rc2

v4.14-rc3

v4.14-rc4

v4.14-rc5

v4.14-rc6

v4.14-rc7

v4.14-rc8

v4.15

v4.15-rc1

v4.15-rc2

v4.15-rc3

v4.15-rc4

v4.15-rc5

v4.15-rc6

v4.15-rc7

v4.15-rc8

v4.15-rc9

v4.16

v4.16-rc1

v4.16-rc2

v4.16-rc3

v4.16-rc4

v4.16-rc5

v4.16-rc6

v4.16-rc7

v4.17

v4.17-rc1

v4.17-rc2

v4.17-rc3

v4.17-rc4

v4.17-rc5

v4.17-rc6

v4.17-rc7

v4.18

v4.18-rc1

v4.18-rc2

v4.18-rc3

v4.18-rc4

v4.18-rc5

v4.18-rc6

v4.18-rc7

v4.18-rc8

v4.19

v4.19-rc1

v4.19-rc2

v4.19-rc3

v4.19-rc4

v4.19-rc5

v4.19-rc6

v4.19-rc7

v4.19-rc8

v4.20

v4.20-rc1

v4.20-rc2

v4.20-rc3

v4.20-rc4

v4.20-rc5

v4.20-rc6

v4.20-rc7

v4.7

v4.7-rc6

v4.7-rc7

v4.8

v4.8-rc1

v4.8-rc2

v4.8-rc3

v4.8-rc4

v4.8-rc5

v4.8-rc6

v4.8-rc7

v4.8-rc8

v4.9

v4.9-rc1

v4.9-rc2

v4.9-rc3

v4.9-rc4

v4.9-rc5

v4.9-rc6

v4.9-rc7

v4.9-rc8

v5.*

v5.0

v5.0-rc1

v5.0-rc2

v5.0-rc3

v5.0-rc4

v5.0-rc5

v5.0-rc6

v5.0-rc7

v5.0-rc8

v5.1

v5.1-rc1

v5.1-rc2

v5.1-rc3

v5.1-rc4

v5.1-rc5

v5.1-rc6

v5.1-rc7

v5.10

v5.10-rc1

v5.10-rc2

v5.10-rc3

v5.10-rc4

v5.10-rc5

v5.10-rc6

v5.10-rc7

v5.11

v5.11-rc1

v5.11-rc2

v5.11-rc3

v5.11-rc4

v5.11-rc5

v5.11-rc6

v5.11-rc7

v5.12

v5.12-rc1

v5.12-rc1-dontuse

v5.12-rc2

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.2

v5.2-rc1

v5.2-rc2

v5.2-rc3

v5.2-rc4

v5.2-rc5

v5.2-rc6

v5.2-rc7

v5.3

v5.3-rc1

v5.3-rc2

v5.3-rc3

v5.3-rc4

v5.3-rc5

v5.3-rc6

v5.3-rc7

v5.3-rc8

v5.4

v5.4-rc1

v5.4-rc2

v5.4-rc3

v5.4-rc4

v5.4-rc5

v5.4-rc6

v5.4-rc7

v5.4-rc8

v5.5

v5.5-rc1

v5.5-rc2

v5.5-rc3

v5.5-rc4

v5.5-rc5

v5.5-rc6

v5.5-rc7

v5.6

v5.6-rc1

v5.6-rc2

v5.6-rc3

v5.6-rc4

v5.6-rc5

v5.6-rc6

v5.6-rc7

v5.7

v5.7-rc1

v5.7-rc2

v5.7-rc3

v5.7-rc4

v5.7-rc5

v5.7-rc6

v5.7-rc7

v5.8

v5.8-rc1

v5.8-rc2

v5.8-rc3

v5.8-rc4

v5.8-rc5

v5.8-rc6

v5.8-rc7

v5.9

v5.9-rc1

v5.9-rc2

v5.9-rc3

v5.9-rc4

v5.9-rc5

v5.9-rc6

v5.9-rc7

v5.9-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.10

v6.10-rc1

v6.10-rc2

v6.10-rc3

v6.10-rc4

v6.10-rc5

v6.10-rc6

v6.10-rc7

v6.11

v6.11-rc1

v6.11-rc2

v6.11-rc3

v6.11-rc4

v6.11-rc5

v6.11-rc6

v6.11-rc7

v6.12

v6.12-rc1

v6.12-rc2

v6.12-rc3

v6.12-rc4

v6.12-rc5

v6.12-rc6

v6.12-rc7

v6.12.1

v6.12.10

v6.12.11

v6.12.12

v6.12.13

v6.12.14

v6.12.15

v6.12.16

v6.12.17

v6.12.18

v6.12.19

v6.12.2

v6.12.20

v6.12.21

v6.12.22

v6.12.23

v6.12.24

v6.12.25

v6.12.26

v6.12.27

v6.12.28

v6.12.29

v6.12.3

v6.12.30

v6.12.31

v6.12.32

v6.12.33

v6.12.34

v6.12.4

v6.12.5

v6.12.6

v6.12.7

v6.12.8

v6.12.9

v6.13

v6.13-rc1

v6.13-rc2

v6.13-rc3

v6.13-rc4

v6.13-rc5

v6.13-rc6

v6.13-rc7

v6.14

v6.14-rc1

v6.14-rc2

v6.14-rc3

v6.14-rc4

v6.14-rc5

v6.14-rc6

v6.14-rc7

v6.15

v6.15-rc1

v6.15-rc2

v6.15-rc3

v6.15-rc4

v6.15-rc5

v6.15-rc6

v6.15-rc7

v6.15.1

v6.15.2

v6.15.3

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.29

v6.6.3

v6.6.30

v6.6.31

v6.6.32

v6.6.33

v6.6.34

v6.6.35

v6.6.36

v6.6.37

v6.6.38

v6.6.39

v6.6.4

v6.6.40

v6.6.41

v6.6.42

v6.6.43

v6.6.44

v6.6.45

v6.6.46

v6.6.47

v6.6.48

v6.6.49

v6.6.5

v6.6.50

v6.6.51

v6.6.52

v6.6.53

v6.6.54

v6.6.55

v6.6.56

v6.6.57

v6.6.58

v6.6.59

v6.6.6

v6.6.60

v6.6.61

v6.6.62

v6.6.63

v6.6.64

v6.6.65

v6.6.66

v6.6.67

v6.6.68

v6.6.69

v6.6.7

v6.6.70

v6.6.71

v6.6.72

v6.6.73

v6.6.74

v6.6.75

v6.6.76

v6.6.77

v6.6.78

v6.6.79

v6.6.8

v6.6.80

v6.6.81

v6.6.82

v6.6.83

v6.6.84

v6.6.85

v6.6.86

v6.6.87

v6.6.88

v6.6.89

v6.6.9

v6.6.90

v6.6.91

v6.6.92

v6.6.93

v6.6.94

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.9

v6.9-rc1

v6.9-rc2

v6.9-rc3

v6.9-rc4

v6.9-rc5

v6.9-rc6

v6.9-rc7

Database specific

vanir_signatures

[
    {
        "id": "CVE-2025-38192-03b1ace6",
        "target": {
            "function": "bpf_skb_proto_4_to_6",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfa4d86e130a09f67607482e988313430e38f6c4",
        "deprecated": false,
        "digest": {
            "length": 555.0,
            "function_hash": "212626836208767870413244062789325028127"
        }
    },
    {
        "id": "CVE-2025-38192-161ed7de",
        "target": {
            "function": "bpf_skb_net_shrink",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a3ad42a57b43145839f2f233fb562247658a6d9",
        "deprecated": false,
        "digest": {
            "length": 1061.0,
            "function_hash": "94968405305873938957410315970756558323"
        }
    },
    {
        "id": "CVE-2025-38192-22eaf321",
        "target": {
            "function": "bpf_skb_proto_6_to_4",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ba9db6f907ac02215e30128770f85fbd7db2fcf9",
        "deprecated": false,
        "digest": {
            "length": 560.0,
            "function_hash": "51596698405208170851505174576284397662"
        }
    },
    {
        "id": "CVE-2025-38192-2340a7a8",
        "target": {
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9994e7b9f7bbb882d13c8191731649249150d21",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "151227409949348015497111607543239790683",
                "179653021964275647131094557277174538543",
                "80962891668886291911542706293463846536",
                "132466103297208795001513842343084530595",
                "100803380579963947161089002690719715735",
                "238356158854747893648891649572896944012",
                "275868319158420349450413509348443878819",
                "110704373558183654679538199556851004165",
                "205180961949284611510714765779935137690",
                "104792216199373630073085358562272819186",
                "270527806552054387693537863596911678857",
                "140890972147457068044547917129213882778",
                "33662474641843531982418171065739004716",
                "99347725451389774539562369842826342688",
                "171721012275104732786415676817432211924",
                "340277079799865085552924136190832079696",
                "219639841289148243072183810566420148358",
                "159654554588377842398583373400822936863",
                "244063709994081637941835582245916770437",
                "123569170028912233093901806922302339218",
                "201459801466974986511998933381729561634",
                "231082490198692318031639708442328163916",
                "223627278528872089889399593935427212315",
                "40969797861013247115913838796491728242",
                "73655896179369490931345059078105048291"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38192-2d09c9bc",
        "target": {
            "function": "bpf_skb_net_shrink",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9994e7b9f7bbb882d13c8191731649249150d21",
        "deprecated": false,
        "digest": {
            "length": 1061.0,
            "function_hash": "94968405305873938957410315970756558323"
        }
    },
    {
        "id": "CVE-2025-38192-3ec228e8",
        "target": {
            "function": "bpf_skb_net_grow",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a3ad42a57b43145839f2f233fb562247658a6d9",
        "deprecated": false,
        "digest": {
            "length": 2567.0,
            "function_hash": "79413983160307129433350148530076213157"
        }
    },
    {
        "id": "CVE-2025-38192-482d12b1",
        "target": {
            "function": "bpf_skb_proto_4_to_6",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9994e7b9f7bbb882d13c8191731649249150d21",
        "deprecated": false,
        "digest": {
            "length": 555.0,
            "function_hash": "212626836208767870413244062789325028127"
        }
    },
    {
        "id": "CVE-2025-38192-4c01a586",
        "target": {
            "function": "bpf_skb_proto_4_to_6",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ba9db6f907ac02215e30128770f85fbd7db2fcf9",
        "deprecated": false,
        "digest": {
            "length": 555.0,
            "function_hash": "212626836208767870413244062789325028127"
        }
    },
    {
        "id": "CVE-2025-38192-55b15e7d",
        "target": {
            "function": "bpf_skb_net_grow",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ba9db6f907ac02215e30128770f85fbd7db2fcf9",
        "deprecated": false,
        "digest": {
            "length": 2567.0,
            "function_hash": "79413983160307129433350148530076213157"
        }
    },
    {
        "id": "CVE-2025-38192-5bed2e0e",
        "target": {
            "function": "bpf_skb_proto_4_to_6",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a3ad42a57b43145839f2f233fb562247658a6d9",
        "deprecated": false,
        "digest": {
            "length": 555.0,
            "function_hash": "212626836208767870413244062789325028127"
        }
    },
    {
        "id": "CVE-2025-38192-6006c83e",
        "target": {
            "function": "bpf_skb_net_grow",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfa4d86e130a09f67607482e988313430e38f6c4",
        "deprecated": false,
        "digest": {
            "length": 2567.0,
            "function_hash": "79413983160307129433350148530076213157"
        }
    },
    {
        "id": "CVE-2025-38192-62679dee",
        "target": {
            "function": "bpf_skb_net_shrink",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfa4d86e130a09f67607482e988313430e38f6c4",
        "deprecated": false,
        "digest": {
            "length": 1061.0,
            "function_hash": "94968405305873938957410315970756558323"
        }
    },
    {
        "id": "CVE-2025-38192-62e049c7",
        "target": {
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ba9db6f907ac02215e30128770f85fbd7db2fcf9",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "151227409949348015497111607543239790683",
                "179653021964275647131094557277174538543",
                "80962891668886291911542706293463846536",
                "132466103297208795001513842343084530595",
                "100803380579963947161089002690719715735",
                "238356158854747893648891649572896944012",
                "275868319158420349450413509348443878819",
                "110704373558183654679538199556851004165",
                "205180961949284611510714765779935137690",
                "104792216199373630073085358562272819186",
                "270527806552054387693537863596911678857",
                "140890972147457068044547917129213882778",
                "33662474641843531982418171065739004716",
                "99347725451389774539562369842826342688",
                "171721012275104732786415676817432211924",
                "340277079799865085552924136190832079696",
                "219639841289148243072183810566420148358",
                "159654554588377842398583373400822936863",
                "244063709994081637941835582245916770437",
                "123569170028912233093901806922302339218",
                "201459801466974986511998933381729561634",
                "231082490198692318031639708442328163916",
                "223627278528872089889399593935427212315",
                "40969797861013247115913838796491728242",
                "73655896179369490931345059078105048291"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38192-769cc972",
        "target": {
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfa4d86e130a09f67607482e988313430e38f6c4",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "151227409949348015497111607543239790683",
                "179653021964275647131094557277174538543",
                "80962891668886291911542706293463846536",
                "132466103297208795001513842343084530595",
                "100803380579963947161089002690719715735",
                "238356158854747893648891649572896944012",
                "275868319158420349450413509348443878819",
                "110704373558183654679538199556851004165",
                "205180961949284611510714765779935137690",
                "104792216199373630073085358562272819186",
                "270527806552054387693537863596911678857",
                "140890972147457068044547917129213882778",
                "33662474641843531982418171065739004716",
                "99347725451389774539562369842826342688",
                "171721012275104732786415676817432211924",
                "340277079799865085552924136190832079696",
                "219639841289148243072183810566420148358",
                "159654554588377842398583373400822936863",
                "244063709994081637941835582245916770437",
                "123569170028912233093901806922302339218",
                "201459801466974986511998933381729561634",
                "231082490198692318031639708442328163916",
                "223627278528872089889399593935427212315",
                "40969797861013247115913838796491728242",
                "73655896179369490931345059078105048291"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38192-8d37f409",
        "target": {
            "function": "bpf_skb_net_shrink",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ba9db6f907ac02215e30128770f85fbd7db2fcf9",
        "deprecated": false,
        "digest": {
            "length": 1061.0,
            "function_hash": "94968405305873938957410315970756558323"
        }
    },
    {
        "id": "CVE-2025-38192-904e6bf5",
        "target": {
            "function": "bpf_skb_net_grow",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9994e7b9f7bbb882d13c8191731649249150d21",
        "deprecated": false,
        "digest": {
            "length": 2567.0,
            "function_hash": "79413983160307129433350148530076213157"
        }
    },
    {
        "id": "CVE-2025-38192-9261eb80",
        "target": {
            "function": "bpf_skb_proto_6_to_4",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e9994e7b9f7bbb882d13c8191731649249150d21",
        "deprecated": false,
        "digest": {
            "length": 560.0,
            "function_hash": "51596698405208170851505174576284397662"
        }
    },
    {
        "id": "CVE-2025-38192-bef365ed",
        "target": {
            "function": "bpf_skb_proto_6_to_4",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a3ad42a57b43145839f2f233fb562247658a6d9",
        "deprecated": false,
        "digest": {
            "length": 560.0,
            "function_hash": "51596698405208170851505174576284397662"
        }
    },
    {
        "id": "CVE-2025-38192-e9ff04bf",
        "target": {
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a3ad42a57b43145839f2f233fb562247658a6d9",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "151227409949348015497111607543239790683",
                "179653021964275647131094557277174538543",
                "80962891668886291911542706293463846536",
                "132466103297208795001513842343084530595",
                "100803380579963947161089002690719715735",
                "238356158854747893648891649572896944012",
                "275868319158420349450413509348443878819",
                "110704373558183654679538199556851004165",
                "205180961949284611510714765779935137690",
                "104792216199373630073085358562272819186",
                "270527806552054387693537863596911678857",
                "140890972147457068044547917129213882778",
                "33662474641843531982418171065739004716",
                "99347725451389774539562369842826342688",
                "171721012275104732786415676817432211924",
                "340277079799865085552924136190832079696",
                "219639841289148243072183810566420148358",
                "159654554588377842398583373400822936863",
                "244063709994081637941835582245916770437",
                "123569170028912233093901806922302339218",
                "201459801466974986511998933381729561634",
                "231082490198692318031639708442328163916",
                "223627278528872089889399593935427212315",
                "40969797861013247115913838796491728242",
                "73655896179369490931345059078105048291"
            ],
            "threshold": 0.9
        }
    },
    {
        "id": "CVE-2025-38192-f0b5ce11",
        "target": {
            "function": "bpf_skb_proto_6_to_4",
            "file": "net/core/filter.c"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfa4d86e130a09f67607482e988313430e38f6c4",
        "deprecated": false,
        "digest": {
            "length": 560.0,
            "function_hash": "51596698405208170851505174576284397662"
        }
    }
]

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.8.0

Fixed

6.6.95

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.35

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.15.4