Vulnerability in Linux Kernel MPLS Implementation Affecting Various Distributions

CVE-2025-38324

What is CVE-2025-38324?

A key vulnerability has been identified in the Linux Kernel related to the multiprotocol label switching (MPLS) implementation. The issue arises in the function 'mpls_route_input_rcu()', which can be invoked from 'mpls_getroute()'. The data structure 'net->mpls.platform_label' is only modified while holding the RTNL lock. As a preventive measure, the use of 'rcu_dereference_rtnl()' is now implemented within 'mpls_route_input_rcu()' to mitigate potential race conditions, silencing associated warnings and ensuring better synchronization in a multitasking environment.

References