Search: CVE-2025-38572

A high severity vulnerability (CVE-2025-38572) in the Linux kernel's IPv6 networking code was resolved. The flaw involved the ipv6_gso_segment() function improperly handling packets with very long IPv6 extension headers, leading to an overflow of the skb->transport_header field. This vulnerability could allow local attackers with certain privileges to cause memory corruption. A patch has been released and is included in Linux kernel version 6.14.0 and later updates. Users should update their Linux kernel to the fixed versions to mitigate this issue.