CVE-2025-38192

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel can cause a kernel crash when a not-so-careful NAT46 BPF program indiscriminately flips ingress packets from IPv4 to IPv6. This issue occurs because the dst is not cleared when the protocol is changed, resulting in a NULL pointer dereference. The problem arises when the output interface has a 4->6 program attached at ingress and the multicast skb is looped back to the sending socket. The ip6 rcv core function tries to use skb dst(), but the dst is still an IPv4 one left after IPv4 mcast output.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.