[Git][security-tracker-team/security-tracker][master] Add CVE-2025-38500/linux

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
263cf516 by Salvatore Bonaccorso at 2025-08-12T21:20:04+02:00
Add CVE-2025-38500/linux

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2025-38500 [xfrm: interface: fix use-after-free after changing collect_md xfrm interface]
+	- linux <unfixed>
+	[bullseye] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/a90b2a1aaacbcf0f91d7e4868ad6c51c5dee814b (6.16)
 CVE-2025-8874 (The Master Addons \u2013 Elementor Addons with White Label, Free Widge ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2025-8767 (The AnWP Football Leagues plugin for WordPress is vulnerable to CSV In ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/263cf516844af54164ce98b6ea7e46235d476f76

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/263cf516844af54164ce98b6ea7e46235d476f76
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250812/5b0f79a8/attachment.htm>