Linux Kernel Multicast and Broadcast RA Vulnerability

CVE-2025-38343

What is CVE-2025-38343?

A vulnerability in the Linux kernel related to the handling of multicast or broadcast Radio Addresses (RA) has been identified, highlighting an issue with IEEE 802.11 fragmentation. The vulnerability allows incorrect processing of fragments, which should only be applied to unicast frames. This could lead to potential security risks when fragments are improperly handled. A recent patch has been implemented to address this vulnerability by ensuring that any fragments with multicast or broadcast RA are dropped, thereby enhancing the overall security of the kernel and mitigating risks associated with past vulnerabilities.

References