CVE-2025-38432

net: netpoll: Initialize UDP checksum field before checksumming

State
Published
Severity
Not scored
Published
Jul 25, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: netpoll: Initialize UDP checksum field before checksumming

commit f1fce08e63fe ("netpoll: Eliminate redundant assignment") removed the initialization of the UDP checksum, which was wrong and broke netpoll IPv6 transmission due to bad checksumming.

udph->check needs to be set before calling csum_ipv6_magic().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f1fce08e63fe1a2a8b8106b93b7244a39830edae to before 353016ec159f939a380ff6746476a779367ba9a3Affected
  • f1fce08e63fe1a2a8b8106b93b7244a39830edae to before f5990207026987a353d5a95204c4d9cb725637fdAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.15.5 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.