Improper Handling of Nexthop Groups in Linux Kernel
CVE-2025-39980

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 15 October 2025

What is CVE-2025-39980?

A vulnerability exists in the Linux kernel related to the handling of nexthop groups and FDB nexthops, which can lead to invalid routing configurations. Specifically, the kernel allows changing the type of a nexthop between FDB and non-FDB while it is in a group, leading to potential network path disconnects (NPD). This misconfiguration can result in a NULL pointer dereference, impairing system stability when attempting to route packets to target addresses. The issue has been addressed by preventing changes to FDB status when the nexthop is part of a group.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch