CVE-2025-38588

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-38588
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38588.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38588
Downstream
Related
Published
2025-08-19T17:03:09Z
Modified
2025-11-04T00:34:01.731926Z
Summary
ipv6: prevent infinite loop in rt6_nlmsg_size()
Details

In the Linux kernel, the following vulnerability has been resolved:

ipv6: prevent infinite loop in rt6nlmsgsize()

While testing prior patch, I was able to trigger an infinite loop in rt6nlmsgsize() in the following place:

listforeachentryrcu(sibling, &f6i->fib6siblings, fib6siblings) { rt6nhnlmsgsize(sibling->fib6nh, &nexthop_len); }

This is because fib6delroute() and fib6addrt2node() uses listdelrcu(), which can confuse rcu readers, because they might no longer see the head of the list.

Restart the loop if f6i->fib6_nsiblings is zero.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d0ec61c9f3583b76aebdbb271f5c0d3fcccd48b2
Fixed
6d345136c9b875f065d226908a29c25cdf9343f8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
52da02521ede55fb86546c3fffd9377b3261b91f
Fixed
e1b7932af47f92432be8303d2439d1bf77b0be23
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
34a949e7a0869dfa31a40416d2a56973fae1807b
Fixed
cd8d8bbd9ced4cc5d06d858f67d4aa87745e8f38
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d9ccb18f83ea2bb654289b6ecf014fd267cc988b
Fixed
3c13db3e47e170bab19e574404e7b6be45ea873d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d9ccb18f83ea2bb654289b6ecf014fd267cc988b
Fixed
46aeb66e9e54ed0d56c18615e1c3dbd502b327ab
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d9ccb18f83ea2bb654289b6ecf014fd267cc988b
Fixed
54e6fe9dd3b0e7c481c2228782c9494d653546da
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
11edcd026012ac18acee0f1514db3ed1b160fc6f

Affected versions

v2.*

v2.6.12
v2.6.12-rc2
v2.6.12-rc3
v2.6.12-rc4
v2.6.12-rc5
v2.6.12-rc6
v2.6.13
v2.6.13-rc1
v2.6.13-rc2
v2.6.13-rc3
v2.6.13-rc4
v2.6.13-rc5
v2.6.13-rc6
v2.6.13-rc7
v2.6.14
v2.6.14-rc1
v2.6.14-rc2
v2.6.14-rc3
v2.6.14-rc4
v2.6.14-rc5
v2.6.15
v2.6.15-rc1
v2.6.15-rc2
v2.6.15-rc3
v2.6.15-rc4
v2.6.15-rc5
v2.6.15-rc6
v2.6.15-rc7
v2.6.16
v2.6.16-rc1
v2.6.16-rc2
v2.6.16-rc3
v2.6.16-rc4
v2.6.16-rc5
v2.6.16-rc6
v2.6.17
v2.6.17-rc1
v2.6.17-rc2
v2.6.17-rc3
v2.6.17-rc4
v2.6.17-rc5
v2.6.17-rc6
v2.6.18
v2.6.18-rc1
v2.6.18-rc2
v2.6.18-rc3
v2.6.18-rc4
v2.6.18-rc5
v2.6.18-rc6
v2.6.18-rc7
v2.6.19
v2.6.19-rc1
v2.6.19-rc2
v2.6.19-rc3
v2.6.19-rc4
v2.6.19-rc5
v2.6.19-rc6
v2.6.20
v2.6.20-rc1
v2.6.20-rc2
v2.6.20-rc3
v2.6.20-rc4
v2.6.20-rc5
v2.6.20-rc6
v2.6.20-rc7
v2.6.21
v2.6.21-rc1
v2.6.21-rc2
v2.6.21-rc3
v2.6.21-rc4
v2.6.21-rc5
v2.6.21-rc6
v2.6.21-rc7
v2.6.22
v2.6.22-rc1
v2.6.22-rc2
v2.6.22-rc3
v2.6.22-rc4
v2.6.22-rc5
v2.6.22-rc6
v2.6.22-rc7
v2.6.23
v2.6.23-rc1
v2.6.23-rc2
v2.6.23-rc3
v2.6.23-rc4
v2.6.23-rc5
v2.6.23-rc6
v2.6.23-rc7
v2.6.23-rc8
v2.6.23-rc9
v2.6.24
v2.6.24-rc1
v2.6.24-rc2
v2.6.24-rc3
v2.6.24-rc4
v2.6.24-rc5
v2.6.24-rc6
v2.6.24-rc7
v2.6.24-rc8
v2.6.25
v2.6.25-rc1
v2.6.25-rc2
v2.6.25-rc3
v2.6.25-rc4
v2.6.25-rc5
v2.6.25-rc6
v2.6.25-rc7
v2.6.25-rc8
v2.6.25-rc9
v2.6.26
v2.6.26-rc1
v2.6.26-rc2
v2.6.26-rc3
v2.6.26-rc4
v2.6.26-rc5
v2.6.26-rc6
v2.6.26-rc7
v2.6.26-rc8
v2.6.26-rc9
v2.6.27
v2.6.27-rc1
v2.6.27-rc2
v2.6.27-rc3
v2.6.27-rc4
v2.6.27-rc5
v2.6.27-rc6
v2.6.27-rc7
v2.6.27-rc8
v2.6.27-rc9
v2.6.28
v2.6.28-rc1
v2.6.28-rc2
v2.6.28-rc3
v2.6.28-rc4
v2.6.28-rc5
v2.6.28-rc6
v2.6.28-rc7
v2.6.28-rc8
v2.6.28-rc9
v2.6.29
v2.6.29-rc1
v2.6.29-rc2
v2.6.29-rc3
v2.6.29-rc4
v2.6.29-rc5
v2.6.29-rc6
v2.6.29-rc7
v2.6.29-rc8
v2.6.30
v2.6.30-rc1
v2.6.30-rc2
v2.6.30-rc3
v2.6.30-rc4
v2.6.30-rc5
v2.6.30-rc6
v2.6.30-rc7
v2.6.30-rc8
v2.6.31
v2.6.31-rc1
v2.6.31-rc2
v2.6.31-rc3
v2.6.31-rc4
v2.6.31-rc5
v2.6.31-rc6
v2.6.31-rc7
v2.6.31-rc8
v2.6.31-rc9
v2.6.32
v2.6.32-rc1
v2.6.32-rc2
v2.6.32-rc3
v2.6.32-rc4
v2.6.32-rc5
v2.6.32-rc6
v2.6.32-rc7
v2.6.32-rc8
v2.6.33
v2.6.33-rc1
v2.6.33-rc2
v2.6.33-rc3
v2.6.33-rc4
v2.6.33-rc5
v2.6.33-rc6
v2.6.33-rc7
v2.6.33-rc8
v2.6.34
v2.6.34-rc1
v2.6.34-rc2
v2.6.34-rc3
v2.6.34-rc4
v2.6.34-rc5
v2.6.34-rc6
v2.6.34-rc7
v2.6.35
v2.6.35-rc1
v2.6.35-rc2
v2.6.35-rc3
v2.6.35-rc4
v2.6.35-rc5
v2.6.35-rc6
v2.6.36
v2.6.36-rc1
v2.6.36-rc2
v2.6.36-rc3
v2.6.36-rc4
v2.6.36-rc5
v2.6.36-rc6
v2.6.36-rc7
v2.6.36-rc8
v2.6.37
v2.6.37-rc1
v2.6.37-rc2
v2.6.37-rc3
v2.6.37-rc4
v2.6.37-rc5
v2.6.37-rc6
v2.6.37-rc7
v2.6.37-rc8
v2.6.38
v2.6.38-rc1
v2.6.38-rc2
v2.6.38-rc3
v2.6.38-rc4
v2.6.38-rc5
v2.6.38-rc6
v2.6.38-rc7
v2.6.38-rc8
v2.6.39
v2.6.39-rc1
v2.6.39-rc2
v2.6.39-rc3
v2.6.39-rc4
v2.6.39-rc5
v2.6.39-rc6
v2.6.39-rc7

v3.*

v3.0
v3.0-rc1
v3.0-rc2
v3.0-rc3
v3.0-rc4
v3.0-rc5
v3.0-rc6
v3.0-rc7
v3.1
v3.1-rc1
v3.1-rc10
v3.1-rc2
v3.1-rc3
v3.1-rc4
v3.1-rc5
v3.1-rc6
v3.1-rc7
v3.1-rc8
v3.1-rc9
v3.10
v3.10-rc1
v3.10-rc2
v3.10-rc3
v3.10-rc4
v3.10-rc5
v3.10-rc6
v3.10-rc7
v3.11
v3.11-rc1
v3.11-rc2
v3.11-rc3
v3.11-rc4
v3.11-rc5
v3.11-rc6
v3.11-rc7
v3.12
v3.12-rc1
v3.12-rc2
v3.12-rc3
v3.12-rc4
v3.12-rc5
v3.12-rc6
v3.12-rc7
v3.13
v3.13-rc1
v3.13-rc2
v3.13-rc3
v3.13-rc4
v3.13-rc5
v3.13-rc6
v3.13-rc7
v3.13-rc8
v3.14
v3.14-rc1
v3.14-rc2
v3.14-rc3
v3.14-rc4
v3.14-rc5
v3.14-rc6
v3.14-rc7
v3.14-rc8
v3.15
v3.15-rc1
v3.15-rc2
v3.15-rc3
v3.15-rc4
v3.15-rc5
v3.15-rc6
v3.15-rc7
v3.15-rc8
v3.16
v3.16-rc1
v3.16-rc2
v3.16-rc3
v3.16-rc4
v3.16-rc5
v3.16-rc6
v3.16-rc7
v3.17
v3.17-rc1
v3.17-rc2
v3.17-rc3
v3.17-rc4
v3.17-rc5
v3.17-rc6
v3.17-rc7
v3.18
v3.18-rc1
v3.18-rc2
v3.18-rc3
v3.18-rc4
v3.18-rc5
v3.18-rc6
v3.18-rc7
v3.19
v3.19-rc1
v3.19-rc2
v3.19-rc3
v3.19-rc4
v3.19-rc5
v3.19-rc6
v3.19-rc7
v3.2
v3.2-rc1
v3.2-rc2
v3.2-rc3
v3.2-rc4
v3.2-rc5
v3.2-rc6
v3.2-rc7
v3.3
v3.3-rc1
v3.3-rc2
v3.3-rc3
v3.3-rc4
v3.3-rc5
v3.3-rc6
v3.3-rc7
v3.4
v3.4-rc1
v3.4-rc2
v3.4-rc3
v3.4-rc4
v3.4-rc5
v3.4-rc6
v3.4-rc7
v3.5
v3.5-rc1
v3.5-rc2
v3.5-rc3
v3.5-rc4
v3.5-rc5
v3.5-rc6
v3.5-rc7
v3.6
v3.6-rc1
v3.6-rc2
v3.6-rc3
v3.6-rc4
v3.6-rc5
v3.6-rc6
v3.6-rc7
v3.7
v3.7-rc1
v3.7-rc2
v3.7-rc3
v3.7-rc4
v3.7-rc5
v3.7-rc6
v3.7-rc7
v3.7-rc8
v3.8
v3.8-rc1
v3.8-rc2
v3.8-rc3
v3.8-rc4
v3.8-rc5
v3.8-rc6
v3.8-rc7
v3.9
v3.9-rc1
v3.9-rc2
v3.9-rc3
v3.9-rc4
v3.9-rc5
v3.9-rc6
v3.9-rc7
v3.9-rc8

v4.*

v4.0
v4.0-rc1
v4.0-rc2
v4.0-rc3
v4.0-rc4
v4.0-rc5
v4.0-rc6
v4.0-rc7
v4.1
v4.1-rc1
v4.1-rc2
v4.1-rc3
v4.1-rc4
v4.1-rc5
v4.1-rc6
v4.1-rc7
v4.1-rc8
v4.10
v4.10-rc1
v4.10-rc2
v4.10-rc3
v4.10-rc4
v4.10-rc5
v4.10-rc6
v4.10-rc7
v4.10-rc8
v4.11
v4.11-rc1
v4.11-rc2
v4.11-rc3
v4.11-rc4
v4.11-rc5
v4.11-rc6
v4.11-rc7
v4.11-rc8
v4.12
v4.12-rc1
v4.12-rc2
v4.12-rc3
v4.12-rc4
v4.12-rc5
v4.12-rc6
v4.12-rc7
v4.13
v4.13-rc1
v4.13-rc2
v4.13-rc3
v4.13-rc4
v4.13-rc5
v4.13-rc6
v4.13-rc7
v4.14
v4.14-rc1
v4.14-rc2
v4.14-rc3
v4.14-rc4
v4.14-rc5
v4.14-rc6
v4.14-rc7
v4.14-rc8
v4.15
v4.15-rc1
v4.15-rc2
v4.15-rc3
v4.15-rc4
v4.15-rc5
v4.15-rc6
v4.15-rc7
v4.15-rc8
v4.15-rc9
v4.16
v4.16-rc1
v4.16-rc2
v4.16-rc3
v4.16-rc4
v4.16-rc5
v4.16-rc6
v4.16-rc7
v4.17
v4.17-rc1
v4.17-rc2
v4.17-rc3
v4.17-rc4
v4.17-rc5
v4.17-rc6
v4.17-rc7
v4.18
v4.18-rc1
v4.18-rc2
v4.18-rc3
v4.18-rc4
v4.18-rc5
v4.18-rc6
v4.18-rc7
v4.18-rc8
v4.19
v4.19-rc1
v4.19-rc2
v4.19-rc3
v4.19-rc4
v4.19-rc5
v4.19-rc6
v4.19-rc7
v4.19-rc8
v4.2
v4.2-rc1
v4.2-rc2
v4.2-rc3
v4.2-rc4
v4.2-rc5
v4.2-rc6
v4.2-rc7
v4.2-rc8
v4.20
v4.20-rc1
v4.20-rc2
v4.20-rc3
v4.20-rc4
v4.20-rc5
v4.20-rc6
v4.20-rc7
v4.3
v4.3-rc1
v4.3-rc2
v4.3-rc3
v4.3-rc4
v4.3-rc5
v4.3-rc6
v4.3-rc7
v4.4
v4.4-rc1
v4.4-rc2
v4.4-rc3
v4.4-rc4
v4.4-rc5
v4.4-rc6
v4.4-rc7
v4.4-rc8
v4.5
v4.5-rc1
v4.5-rc2
v4.5-rc3
v4.5-rc4
v4.5-rc5
v4.5-rc6
v4.5-rc7
v4.6
v4.6-rc1
v4.6-rc2
v4.6-rc3
v4.6-rc4
v4.6-rc5
v4.6-rc6
v4.6-rc7
v4.7
v4.7-rc1
v4.7-rc2
v4.7-rc3
v4.7-rc4
v4.7-rc5
v4.7-rc6
v4.7-rc7
v4.8
v4.8-rc1
v4.8-rc2
v4.8-rc3
v4.8-rc4
v4.8-rc5
v4.8-rc6
v4.8-rc7
v4.8-rc8
v4.9
v4.9-rc1
v4.9-rc2
v4.9-rc3
v4.9-rc4
v4.9-rc5
v4.9-rc6
v4.9-rc7
v4.9-rc8

v5.*

v5.0
v5.0-rc1
v5.0-rc2
v5.0-rc3
v5.0-rc4
v5.0-rc5
v5.0-rc6
v5.0-rc7
v5.0-rc8
v5.1
v5.1-rc1
v5.1-rc2
v5.1-rc3
v5.1-rc4
v5.1-rc5
v5.1-rc6
v5.1-rc7
v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.2
v5.2-rc1
v5.2-rc2
v5.2-rc3
v5.2-rc4
v5.2-rc5
v5.2-rc6
v5.2-rc7
v5.3
v5.3-rc1
v5.3-rc2
v5.3-rc3
v5.3-rc4
v5.3-rc5
v5.3-rc6
v5.3-rc7
v5.3-rc8
v5.4
v5.4-rc1
v5.4-rc2
v5.4-rc3
v5.4-rc4
v5.4-rc5
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.128
v6.1.129
v6.1.130
v6.1.131
v6.1.132
v6.1.133
v6.1.134
v6.1.135
v6.1.136
v6.1.137
v6.1.138
v6.1.139
v6.1.140
v6.1.141
v6.1.142
v6.1.143
v6.1.144
v6.1.145
v6.1.146
v6.1.147
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.11.1
v6.11.10
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.11.6
v6.11.7
v6.11.8
v6.11.9
v6.12
v6.12-rc7
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.3
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.34
v6.12.35
v6.12.36
v6.12.37
v6.12.38
v6.12.39
v6.12.4
v6.12.40
v6.12.41
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.15.1
v6.15.2
v6.15.3
v6.15.4
v6.15.5
v6.15.6
v6.15.7
v6.15.8
v6.15.9
v6.16
v6.16-rc1
v6.16-rc2
v6.16-rc3
v6.16-rc4
v6.16-rc5
v6.16-rc6
v6.16-rc7
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.100
v6.6.101
v6.6.75
v6.6.76
v6.6.77
v6.6.78
v6.6.79
v6.6.80
v6.6.81
v6.6.82
v6.6.83
v6.6.84
v6.6.85
v6.6.86
v6.6.87
v6.6.88
v6.6.89
v6.6.90
v6.6.91
v6.6.92
v6.6.93
v6.6.94
v6.6.95
v6.6.96
v6.6.97
v6.6.98
v6.6.99
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e1b7932af47f92432be8303d2439d1bf77b0be23",
        "deprecated": false,
        "digest": {
            "function_hash": "301453613663134196562697790563404169788",
            "length": 4751.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-2a49a9ae",
        "signature_type": "Function",
        "target": {
            "function": "fib6_add_rt2node",
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c13db3e47e170bab19e574404e7b6be45ea873d",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "206033579981418908219696381304598007362",
                "315288348987143694481624749803601816642",
                "338872744769507551498737314149236536785",
                "174001101455780303392123824682560520063",
                "334390382256460211643052574630765497967",
                "214144214580468619976042160064720441542",
                "338872744769507551498737314149236536785",
                "151986467203357522955743110668044459641"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-3bed96cf",
        "signature_type": "Line",
        "target": {
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c13db3e47e170bab19e574404e7b6be45ea873d",
        "deprecated": false,
        "digest": {
            "function_hash": "334479965457802527825136612077383034342",
            "length": 757.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-3f508528",
        "signature_type": "Function",
        "target": {
            "function": "rt6_nlmsg_size",
            "file": "net/ipv6/route.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46aeb66e9e54ed0d56c18615e1c3dbd502b327ab",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "206033579981418908219696381304598007362",
                "315288348987143694481624749803601816642",
                "8455753629433173249736202297882520813",
                "152478422455078212504512961740578189592",
                "334390382256460211643052574630765497967",
                "214144214580468619976042160064720441542",
                "338872744769507551498737314149236536785",
                "151986467203357522955743110668044459641"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-7b875929",
        "signature_type": "Line",
        "target": {
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c13db3e47e170bab19e574404e7b6be45ea873d",
        "deprecated": false,
        "digest": {
            "function_hash": "64006018357907457951813961279122894139",
            "length": 1905.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-821b04a8",
        "signature_type": "Function",
        "target": {
            "function": "fib6_del_route",
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54e6fe9dd3b0e7c481c2228782c9494d653546da",
        "deprecated": false,
        "digest": {
            "function_hash": "334479965457802527825136612077383034342",
            "length": 757.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-8bfe5605",
        "signature_type": "Function",
        "target": {
            "function": "rt6_nlmsg_size",
            "file": "net/ipv6/route.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46aeb66e9e54ed0d56c18615e1c3dbd502b327ab",
        "deprecated": false,
        "digest": {
            "function_hash": "64006018357907457951813961279122894139",
            "length": 1905.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-9385ddcd",
        "signature_type": "Function",
        "target": {
            "function": "fib6_del_route",
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54e6fe9dd3b0e7c481c2228782c9494d653546da",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "206033579981418908219696381304598007362",
                "315288348987143694481624749803601816642",
                "8455753629433173249736202297882520813",
                "152478422455078212504512961740578189592",
                "334390382256460211643052574630765497967",
                "214144214580468619976042160064720441542",
                "338872744769507551498737314149236536785",
                "151986467203357522955743110668044459641"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-a767fe3e",
        "signature_type": "Line",
        "target": {
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54e6fe9dd3b0e7c481c2228782c9494d653546da",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "160592874806539787238946821217670612552",
                "306617035986840763565020610931565651489",
                "185662114174319944408369498761254976359",
                "142875468429410523237961252909475109015",
                "299481095427676301280205454253509379746",
                "338841219294866731963162421833671274566",
                "323198068160725747236345606270011285390",
                "332272459481461178686655670180816291599",
                "240399618359432149667011759442378188459",
                "155030262897259017226050939438456911096",
                "42341290453165557720850339695146062437",
                "308046304231688907495091180962303220886",
                "141592806495523811323383315655670614065",
                "217913160389632890284110460735752018849",
                "176252555494541367972148894843259861212",
                "281213854328073624185270332917800704034",
                "171640089340445221977295898314267347656",
                "21737680714228206444708486972013459645",
                "126273720928991104999832347469035950637",
                "259351111613977813481061675878656571348",
                "182198614028837151470013082460072824914",
                "100911561375012352971660244933330688702",
                "9803749019510184939894957399179026269",
                "270543218585062662995044715765677778070"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-b3ffbea6",
        "signature_type": "Line",
        "target": {
            "file": "net/ipv6/route.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54e6fe9dd3b0e7c481c2228782c9494d653546da",
        "deprecated": false,
        "digest": {
            "function_hash": "174671158405215436818386407869831757487",
            "length": 4831.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-c65c51f9",
        "signature_type": "Function",
        "target": {
            "function": "fib6_add_rt2node",
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e1b7932af47f92432be8303d2439d1bf77b0be23",
        "deprecated": false,
        "digest": {
            "function_hash": "334479965457802527825136612077383034342",
            "length": 757.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-c9a821be",
        "signature_type": "Function",
        "target": {
            "function": "rt6_nlmsg_size",
            "file": "net/ipv6/route.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46aeb66e9e54ed0d56c18615e1c3dbd502b327ab",
        "deprecated": false,
        "digest": {
            "function_hash": "334479965457802527825136612077383034342",
            "length": 757.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-ce7221fa",
        "signature_type": "Function",
        "target": {
            "function": "rt6_nlmsg_size",
            "file": "net/ipv6/route.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e1b7932af47f92432be8303d2439d1bf77b0be23",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "160592874806539787238946821217670612552",
                "306617035986840763565020610931565651489",
                "185662114174319944408369498761254976359",
                "142875468429410523237961252909475109015",
                "299481095427676301280205454253509379746",
                "338841219294866731963162421833671274566",
                "323198068160725747236345606270011285390",
                "332272459481461178686655670180816291599",
                "240399618359432149667011759442378188459",
                "155030262897259017226050939438456911096",
                "42341290453165557720850339695146062437",
                "308046304231688907495091180962303220886",
                "141592806495523811323383315655670614065",
                "217913160389632890284110460735752018849",
                "176252555494541367972148894843259861212",
                "281213854328073624185270332917800704034",
                "171640089340445221977295898314267347656",
                "21737680714228206444708486972013459645",
                "126273720928991104999832347469035950637",
                "259351111613977813481061675878656571348",
                "182198614028837151470013082460072824914",
                "100911561375012352971660244933330688702",
                "9803749019510184939894957399179026269",
                "270543218585062662995044715765677778070"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-d92bbea1",
        "signature_type": "Line",
        "target": {
            "file": "net/ipv6/route.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e1b7932af47f92432be8303d2439d1bf77b0be23",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "206033579981418908219696381304598007362",
                "315288348987143694481624749803601816642",
                "338872744769507551498737314149236536785",
                "174001101455780303392123824682560520063",
                "334390382256460211643052574630765497967",
                "214144214580468619976042160064720441542",
                "338872744769507551498737314149236536785",
                "151986467203357522955743110668044459641"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-e663d2e6",
        "signature_type": "Line",
        "target": {
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e1b7932af47f92432be8303d2439d1bf77b0be23",
        "deprecated": false,
        "digest": {
            "function_hash": "7479308488065149718051546294637305246",
            "length": 1939.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-ea83b040",
        "signature_type": "Function",
        "target": {
            "function": "fib6_del_route",
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54e6fe9dd3b0e7c481c2228782c9494d653546da",
        "deprecated": false,
        "digest": {
            "function_hash": "64006018357907457951813961279122894139",
            "length": 1905.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-ec74cd5f",
        "signature_type": "Function",
        "target": {
            "function": "fib6_del_route",
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46aeb66e9e54ed0d56c18615e1c3dbd502b327ab",
        "deprecated": false,
        "digest": {
            "function_hash": "174671158405215436818386407869831757487",
            "length": 4831.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-ecd4084b",
        "signature_type": "Function",
        "target": {
            "function": "fib6_add_rt2node",
            "file": "net/ipv6/ip6_fib.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c13db3e47e170bab19e574404e7b6be45ea873d",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "160592874806539787238946821217670612552",
                "306617035986840763565020610931565651489",
                "185662114174319944408369498761254976359",
                "142875468429410523237961252909475109015",
                "299481095427676301280205454253509379746",
                "338841219294866731963162421833671274566",
                "323198068160725747236345606270011285390",
                "332272459481461178686655670180816291599",
                "240399618359432149667011759442378188459",
                "155030262897259017226050939438456911096",
                "42341290453165557720850339695146062437",
                "308046304231688907495091180962303220886",
                "141592806495523811323383315655670614065",
                "217913160389632890284110460735752018849",
                "176252555494541367972148894843259861212",
                "281213854328073624185270332917800704034",
                "171640089340445221977295898314267347656",
                "21737680714228206444708486972013459645",
                "126273720928991104999832347469035950637",
                "259351111613977813481061675878656571348",
                "182198614028837151470013082460072824914",
                "100911561375012352971660244933330688702",
                "9803749019510184939894957399179026269",
                "270543218585062662995044715765677778070"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-f1748634",
        "signature_type": "Line",
        "target": {
            "file": "net/ipv6/route.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@46aeb66e9e54ed0d56c18615e1c3dbd502b327ab",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "160592874806539787238946821217670612552",
                "306617035986840763565020610931565651489",
                "185662114174319944408369498761254976359",
                "142875468429410523237961252909475109015",
                "299481095427676301280205454253509379746",
                "338841219294866731963162421833671274566",
                "323198068160725747236345606270011285390",
                "332272459481461178686655670180816291599",
                "240399618359432149667011759442378188459",
                "155030262897259017226050939438456911096",
                "42341290453165557720850339695146062437",
                "308046304231688907495091180962303220886",
                "141592806495523811323383315655670614065",
                "217913160389632890284110460735752018849",
                "176252555494541367972148894843259861212",
                "281213854328073624185270332917800704034",
                "171640089340445221977295898314267347656",
                "21737680714228206444708486972013459645",
                "126273720928991104999832347469035950637",
                "259351111613977813481061675878656571348",
                "182198614028837151470013082460072824914",
                "100911561375012352971660244933330688702",
                "9803749019510184939894957399179026269",
                "270543218585062662995044715765677778070"
            ]
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-f4dd045c",
        "signature_type": "Line",
        "target": {
            "file": "net/ipv6/route.c"
        }
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c13db3e47e170bab19e574404e7b6be45ea873d",
        "deprecated": false,
        "digest": {
            "function_hash": "236785307904559292919464693177663169609",
            "length": 4797.0
        },
        "signature_version": "v1",
        "id": "CVE-2025-38588-fe4f6840",
        "signature_type": "Function",
        "target": {
            "function": "fib6_add_rt2node",
            "file": "net/ipv6/ip6_fib.c"
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.1.148
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.102
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.42
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.10
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.16.1