Threats tagged 'ghsa-cpc7-gmm2-93c8'

CVE-2025-38019 is a use-after-free vulnerability in the Linux kernel mlxsw spectrum_router driver related to GRE net devices. The driver incorrectly handles neighbor entries on GRE devices during reload, leading to references to freed memory when such devices are deleted. This flaw can cause kernel memory corruption and potentially allow escalation of privileges or system instability.