CVE-2025-38476
A use-after-free vulnerability exists in the Linux kernel's IPv6 implementation. This flaw occurs when the kernel attempts to access memory that has already been freed during the processing of certain network packets.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Users running the Linux kernel, specifically version 6.16 and certain Debian 11.0 systems.
Real-world impact
An attacker could potentially exploit this flaw to cause a system crash or execute arbitrary code with high privileges by sending specially crafted network packets.
Why this severity
The critical score is due to the vulnerability being remotely exploitable over a network without authentication, requiring low complexity and resulting in a total loss of confidentiality, integrity, and availability.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the fix for rpl_do_srh_inline().
NVD-referenced vendor advisory
Timeline
- Jul 28, 2025 · Jul 28, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Jul 30, 2026 · 7d agoAdvisory updatedThe NVD record was last revised.
- Jul 30, 2026 · 6d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- git.kernel.org/stable/c/034b428aa3583373a5…patch
- git.kernel.org/stable/c/06ec83b6c792fde1f7…patch
- git.kernel.org/stable/c/62dcd9d6e61c39122d…patch
- git.kernel.org/stable/c/8ba6c2362b85089b89…patch
- git.kernel.org/stable/c/b640daa2822a39ff76…patch
- git.kernel.org/stable/c/c09e21dfc08d8afb92…patch
- git.kernel.org/stable/c/e8101506ab86dd78f8…patch
- lists.debian.org/debian-lts-announce/2025/10…third party advisory
- lists.debian.org/debian-lts-announce/2025/10…third party advisory