PT-2025-33787

CVE-2025-38589

·

Published

2025-07-23

·

Updated

2026-02-27

Description by

CVSS 2.0
6.0
Medium
MetricsAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-rc6-01246-gf7f52738637f
Description: A null-pointer dereference issue was identified in the neigh flush dev() function within the Linux kernel. This occurred due to a missing check when using the per-netdev neighbour list, specifically within neigh table clear() when called with a NULL device. The issue was initially reported by the kernel test robot and resulted in a general protection fault.
Recommendations: Update to a version newer than 6.12.0-rc6-01246-gf7f52738637f.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2026:20287-1
SUSE-SU-2026:20555-1
SUSE-SU-2026:20570-1
SUSE-SU-2026:20599-1
SUSE-SU-2026:20615-1
USN-7879-1
USN-7879-2
USN-7879-3
USN-7879-4
USN-7880-1
USN-7934-1
Found an issue in the description? Have something to add? Feel free to write us 👾