fkie_nvd - fkie_cve-2025-38432

fkie_cve-2025-38432

Vulnerability from fkie_nvd

Published

2025-07-25 15:15

Modified

2025-07-25 15:29

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: Initialize UDP checksum field before checksumming commit f1fce08e63fe ("netpoll: Eliminate redundant assignment") removed the initialization of the UDP checksum, which was wrong and broke netpoll IPv6 transmission due to bad checksumming. udph->check needs to be set before calling csum_ipv6_magic().

References

▶	URL	Tags
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/353016ec159f939a380ff6746476a779367ba9a3
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/f5990207026987a353d5a95204c4d9cb725637fd

Impacted products

	Vendor	Product	Version

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: netpoll: Initialize UDP checksum field before checksumming\n\ncommit f1fce08e63fe (\"netpoll: Eliminate redundant assignment\") removed\nthe initialization of the UDP checksum, which was wrong and broke\nnetpoll IPv6 transmission due to bad checksumming.\n\nudph-\u003echeck needs to be set before calling csum_ipv6_magic()."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: netpoll: Inicializar el campo de suma de comprobaci\u00f3n UDP antes del commit de suma de comprobaci\u00f3n f1fce08e63fe (\"netpoll: Eliminar la asignaci\u00f3n redundante\") elimin\u00f3 la inicializaci\u00f3n de la suma de comprobaci\u00f3n UDP, lo cual era incorrecto y rompi\u00f3 la transmisi\u00f3n IPv6 de netpoll debido a una suma de comprobaci\u00f3n incorrecta. udph-\u0026gt;check debe configurarse antes de llamar a csum_ipv6_magic()."
    }
  ],
  "id": "CVE-2025-38432",
  "lastModified": "2025-07-25T15:29:19.837",
  "metrics": {},
  "published": "2025-07-25T15:15:28.263",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/353016ec159f939a380ff6746476a779367ba9a3"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/f5990207026987a353d5a95204c4d9cb725637fd"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Awaiting Analysis"
}

CVE-2025-38432 (GCVE-0-2025-38432)

Vulnerability from cvelistv5

Published

2025-07-25 14:24

Modified

2025-07-28 04:22

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: Initialize UDP checksum field before checksumming commit f1fce08e63fe ("netpoll: Eliminate redundant assignment") removed the initialization of the UDP checksum, which was wrong and broke netpoll IPv6 transmission due to bad checksumming. udph->check needs to be set before calling csum_ipv6_magic().

References

►

URL

Tags

	https://git.kernel.org/stable/c/353016ec159f939a380ff6746476a779367ba9a3
	https://git.kernel.org/stable/c/f5990207026987a353d5a95204c4d9cb725637fd

Impacted products

Vendor

Product

Version

►

Version: f1fce08e63fe1a2a8b8106b93b7244a39830edae
Version: f1fce08e63fe1a2a8b8106b93b7244a39830edae

Version: 6.15

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/core/netpoll.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "353016ec159f939a380ff6746476a779367ba9a3",
              "status": "affected",
              "version": "f1fce08e63fe1a2a8b8106b93b7244a39830edae",
              "versionType": "git"
            },
            {
              "lessThan": "f5990207026987a353d5a95204c4d9cb725637fd",
              "status": "affected",
              "version": "f1fce08e63fe1a2a8b8106b93b7244a39830edae",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/core/netpoll.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.15"
            },
            {
              "lessThan": "6.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.15.*",
              "status": "unaffected",
              "version": "6.15.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15.5",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: netpoll: Initialize UDP checksum field before checksumming\n\ncommit f1fce08e63fe (\"netpoll: Eliminate redundant assignment\") removed\nthe initialization of the UDP checksum, which was wrong and broke\nnetpoll IPv6 transmission due to bad checksumming.\n\nudph-\u003echeck needs to be set before calling csum_ipv6_magic()."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-28T04:22:04.875Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/353016ec159f939a380ff6746476a779367ba9a3"
        },
        {
          "url": "https://git.kernel.org/stable/c/f5990207026987a353d5a95204c4d9cb725637fd"
        }
      ],
      "title": "net: netpoll: Initialize UDP checksum field before checksumming",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38432",
    "datePublished": "2025-07-25T14:24:13.766Z",
    "dateReserved": "2025-04-16T04:51:24.015Z",
    "dateUpdated": "2025-07-28T04:22:04.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.