Netfilter Vulnerability in Linux Kernel Affecting Device Management

CVE-2025-38678

What is CVE-2025-38678?

In the Linux kernel, a flaw was identified in the netfilter subsystem that allows for chain and flowtable updates to include duplicated devices within the same transaction batch. When this occurs, the system fails to remove all instances of the duplicated device correctly, leaving one unregistered and potentially causing issues in processing netdev events. The vulnerability emphasizes the need for robust checks when handling device updates to prevent such conflicts, ensuring that transactions are clean and that all devices are properly registered and unregistered.

References