CVE-2025-38432

Description

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: Initialize UDP checksum field before checksumming commit f1fce08e63fe ("netpoll: Eliminate redundant assignment") removed the initialization of the UDP checksum, which was wrong and broke netpoll IPv6 transmission due to bad checksumming. udph->check needs to be set before calling csum_ipv6_magic().

Reserved 2025-04-16 | Published 2025-07-25 | Updated 2025-07-25 | Assigner Linux

Product status

Default status
unaffected

f1fce08e63fe1a2a8b8106b93b7244a39830edae before 353016ec159f939a380ff6746476a779367ba9a3
affected

f1fce08e63fe1a2a8b8106b93b7244a39830edae before f5990207026987a353d5a95204c4d9cb725637fd
affected

Default status
affected

6.15
affected

Any version before 6.15
unaffected

6.15.5
unaffected

6.16-rc4
unaffected

References

git.kernel.org/...c/353016ec159f939a380ff6746476a779367ba9a3

git.kernel.org/...c/f5990207026987a353d5a95204c4d9cb725637fd

cve.org (CVE-2025-38432)

nvd.nist.gov (CVE-2025-38432)

Download JSON