Use-After-Free Vulnerability in Linux Kernel: Impacting Debian Linux Packages
Summary
DEBIAN-CVE-2025-37786: In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsa_tree_setup(), it means that we are the last switch of the tree which is successf... Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware resources and providing essential services to applications. It is known for its stability, performance, and security features. However, vulnerabilities can arise, such as the one identified in this report, which affects the kernel's handling of switch probing in networking functionalities.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the handling of routing tables during the probing of switches in a network. Specifically, when a switch fails to probe successfully after a previous switch has completed its probing, it can lead to a use-after-free condition. This occurs because the memory allocated for the failed switch's ports is freed, but references to this memory remain in the routing table. If these references are accessed, it can result in undefined behavior, including potential crashes or security breaches.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds have been mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
This report outlines a critical use-after-free vulnerability in the Linux kernel affecting Debian packages. Users are advised to update their systems to the patched version to mitigate risks associated with this vulnerability. Regular updates and monitoring for vulnerabilities are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed, leading to potential crashes or exploitation.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file like package-lock.json, you can check for vulnerabilities in real-time.
The risks include system crashes, unauthorized access to system resources, and potential exploitation by attackers to execute arbitrary code.
Yes, the vulnerability affects versions prior to 6.12.25-1 in Debian 13 and Debian 14.
It is recommended to regularly check for updates and apply them promptly to ensure your system is protected against known vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
