CVE-2025-38192

net: clear the dst when changing skb protocol

References

Debian security tracker
cve.org

Notes

 carnil> Introduced in d219df60a70e ("bpf: Add ipip6 and ip6ip decap support for
 carnil> bpf_skb_adjust_room()")
 carnil> 1b00e0dfe7d0 ("bpf: update skb->protocol in bpf_skb_net_grow")
 carnil> 6578171a7ff0 ("bpf: add bpf_skb_change_proto helper"). Vulnerable versions: 4.8.

Bugs

Status

Branch	Status
upstream	released (6.16-rc2) [ba9db6f907ac02215e30128770f85fbd7db2fcf9]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.15-upstream-stable	released (6.15.4) [e9994e7b9f7bbb882d13c8191731649249150d21]
6.12-upstream-stable	released (6.12.35) [2a3ad42a57b43145839f2f233fb562247658a6d9]
6.6-upstream-stable	released (6.6.95) [bfa4d86e130a09f67607482e988313430e38f6c4]
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.12.35-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	needed