CVE-2025-38470

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to VLAN 0 refcount management when toggling filtering during runtime with the "rx-vlan-filter" feature enabled. Specifically, a memory leak can occur when disabling the "rx-vlan-filter" feature while the device is running. Additionally, a null-pointer dereference or bug can be triggered if VLAN 0 is automatically deleted when the device is administratively down, despite not being added when the device was brought up with the filter disabled. This issue arises from improper handling of VLAN 0 reference counts during device state changes and filter toggling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.