CVE-2025-38432
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38432
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38432.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38432
- Downstream
- Published
- 2025-07-25T14:24:13.766Z
- Modified
- 2025-12-02T15:21:43.223120Z
- Summary
- net: netpoll: Initialize UDP checksum field before checksumming
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: netpoll: Initialize UDP checksum field before checksumming
commit f1fce08e63fe ("netpoll: Eliminate redundant assignment") removed the initialization of the UDP checksum, which was wrong and broke netpoll IPv6 transmission due to bad checksumming.
udph->check needs to be set before calling csumipv6magic().
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38432.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/353016ec159f939a380ff6746476a779367ba9a3
- https://git.kernel.org/stable/c/f5990207026987a353d5a95204c4d9cb725637fd
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38432.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-38432