Critical Use-After-Free Vulnerability in Linux Kernel Affecting Debian Packages
Summary
CVE-2025-38500: In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collect_md xfrm interface collect_md property on xfrm interfaces can only be set on device creation,... Affects linux versions < 6.1.148-1. Fixed in 6.1.148-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware resources and providing essential services to applications. It is known for its stability, security, and performance. However, vulnerabilities can arise due to complex interactions within the kernel, potentially compromising system integrity and security. This specific vulnerability affects the xfrm interface, which is used for IPsec and other networking functionalities.
Vulnerability Detail
In the Linux kernel, a use-after-free vulnerability has been identified in the xfrm interface related to the collect_md property. This issue arises when the collect_md property is modified after the interface has been created, leading to a situation where the kernel erroneously manages memory. The failure to enforce checks on this property can result in a double free error, potentially causing system crashes or exploitation by malicious actors. The vulnerability is particularly critical as it can lead to kernel panics and system instability.
How To Fix
Minimum fixed version
6.1.148-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. It is recommended to apply the patch as soon as it becomes available for your Debian version.
Conclusion
The identified use-after-free vulnerability in the Linux kernel poses significant risks to systems running Debian. It is crucial to stay informed about updates and apply patches promptly to maintain system security and stability. Utilizing tools like Vulert can aid in monitoring vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed, potentially leading to arbitrary code execution or crashes.
You can use Vulert, which allows you to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
The vulnerability can lead to system crashes, data corruption, or exploitation by attackers, compromising the security and stability of the system.
Currently, a patch is available for Debian 13 (version 6.12.41-1). Other versions are still pending updates.
If an immediate update is not possible, ensure that your system is not exposed to untrusted networks and monitor for any unusual activity until a patch can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
