Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-39702

ipv6: sr: Fix MAC comparison to be constant-time

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.249, 5.15.190, 6.1.149, 6.6.103, 6.12.44, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in ff55a452d56490047f5233cc48c5d933f8586884; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in 3b348c9c8d2ca2c67559ffd0e258ae7e1107d4f0; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in 86b6d34717fe0570afce07ee79b8eeb40341f831; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in 3ddd55cf19ed6cc62def5e3af10c2a9df1b861c3; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in b3967c493799e63f648e9c7b6cb063aa2aed04e7; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in f7878d47560d61e3f370aca3cebb8f42a55b990a; From bf355b8d2c30a289232042cacc1cfaea4923936c · fixed in a458b2902115b26a25d67393b12ddd57d1216aaa

  • Linux Linux

    4.10

  • KernelLinux

    From 4.10.0 · fixed in 5.10.249; From 5.11.0 · fixed in 5.15.190; From 5.16.0 · fixed in 6.1.149; From 6.2.0 · fixed in 6.6.103; From 6.7.0 · fixed in 6.12.44; From 6.13.0 · fixed in 6.16.4

References 7

git.kernel.org