UDP Checksum Vulnerability in Linux Kernel Affects Network Functionality

CVE-2025-38432

What is CVE-2025-38432?

A vulnerability within the Linux kernel's netpoll feature has surfaced due to a failure to initialize the UDP checksum field before initiating checksumming. This oversight, stemming from a prior code commit, has resulted in disrupted transmission of IPv6 packets, leading to improper checksum calculations. Correct initialization of 'udph->check' is crucial to ensure accurate checksum validation, particularly before invoking the IPv6 checksum function, 'csum_ipv6_magic()'. Addressing this issue promptly is essential for maintaining reliable network communications.

References