CVE-2025-38550

ipv6: mcast: Delay put pmc->idev in mld_del_delrec()

State: Published
Severity: 7.8 High
Published: Aug 16, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: mcast: Delay put pmc->idev in mld_del_delrec()

pmc->idev is still used in ip6_mc_clear_src(), so as mld_clear_delrec() does, the reference should be put after ip6_mc_clear_src() return.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b564ec4491d24b40900c64ab9e29a208f17f3108 to before 1b5b413094af8d88a31b5df3fd262f6baca53841Affected 63ed8de4be81b699ca727e9f8e3344bd487806d7 to before 6e4eec86fe5f6b3fdbc702d1d36ac2a6e7ec0806Affected 63ed8de4be81b699ca727e9f8e3344bd487806d7 to before 728db00a14cacb37f36e9382ab5fad55caf890ccAffected 63ed8de4be81b699ca727e9f8e3344bd487806d7 to before dcbc346f50a009d8b7f4e330f9f2e22d6442fa26Affected 63ed8de4be81b699ca727e9f8e3344bd487806d7 to before 7929d27c747eafe8fca3eecd74a334503ee4c839Affected 63ed8de4be81b699ca727e9f8e3344bd487806d7 to before 5f18e0130194550dff734e155029ae734378b5eaAffected 63ed8de4be81b699ca727e9f8e3344bd487806d7 to before ae3264a25a4635531264728859dbe9c659fad554Affected
LinuxLinux	5.13Affected before 5.13Not affected 5.15.190 through 5.15.Not affected 6.1.147 through 6.1.Not affected 6.6.100 through 6.6.Not affected 6.12.40 through 6.12.Not affected 6.15.8 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

b564ec4491d24b40900c64ab9e29a208f17f3108 to before 1b5b413094af8d88a31b5df3fd262f6baca53841Affected
63ed8de4be81b699ca727e9f8e3344bd487806d7 to before 6e4eec86fe5f6b3fdbc702d1d36ac2a6e7ec0806Affected
63ed8de4be81b699ca727e9f8e3344bd487806d7 to before 728db00a14cacb37f36e9382ab5fad55caf890ccAffected
63ed8de4be81b699ca727e9f8e3344bd487806d7 to before dcbc346f50a009d8b7f4e330f9f2e22d6442fa26Affected
63ed8de4be81b699ca727e9f8e3344bd487806d7 to before 7929d27c747eafe8fca3eecd74a334503ee4c839Affected
63ed8de4be81b699ca727e9f8e3344bd487806d7 to before 5f18e0130194550dff734e155029ae734378b5eaAffected
63ed8de4be81b699ca727e9f8e3344bd487806d7 to before ae3264a25a4635531264728859dbe9c659fad554Affected

LinuxLinux

5.13Affected
before 5.13Not affected
5.15.190 through 5.15.*Not affected
6.1.147 through 6.1.*Not affected
6.6.100 through 6.6.*Not affected
6.12.40 through 6.12.*Not affected
6.15.8 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.