PT-2025-33787
CVE-2025-38589
·
Published
2025-07-23
·
Updated
2026-02-27
Description by
CVSS 2.0
6.0
MediumMetricsAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.12.0-rc6-01246-gf7f52738637f
Description:
A null-pointer dereference issue was identified in the
neigh flush dev() function within the Linux kernel. This occurred due to a missing check when using the per-netdev neighbour list, specifically within neigh table clear() when called with a NULL device. The issue was initially reported by the kernel test robot and resulted in a general protection fault.Recommendations:
Update to a version newer than 6.12.0-rc6-01246-gf7f52738637f.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾