Use-After-Free Vulnerability in Linux Kernel Affecting IPv6 RPL Component

CVE-2025-38476

What is CVE-2025-38476?

A critical use-after-free vulnerability has been identified in the IPv6 RPL component of the Linux Kernel. The flaw occurs in the function rpl_do_srh_inline(), where it attempts to access an IPv6 header after the associated socket buffer may have been freed, leading to potential exploitation scenarios. This vulnerability can affect the stability of the system, resulting in erroneous behavior when handling network packets. To mitigate this risk, a fix has been implemented by converting the header into a local structure rather than a pointer, ensuring proper memory management and enhancing system reliability.

References