by Kastro CVE-2025-39702
Linux Linux — ipv6: sr: Fix MAC comparison to be constant-time
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.
Affected
ProductAffectedFixed inSource
Linuxbf355b8d2c30a289232042cacc1cfaea4923936c – < ff55a452d56490047f5233cc48c5d933f8586884ff55a452d56490047f5233cc48c5d933f8586884CNA
Linuxbf355b8d2c30a289232042cacc1cfaea4923936c – < 3b348c9c8d2ca2c67559ffd0e258ae7e1107d4f03b348c9c8d2ca2c67559ffd0e258ae7e1107d4f0CNA
Linuxbf355b8d2c30a289232042cacc1cfaea4923936c – < 86b6d34717fe0570afce07ee79b8eeb40341f83186b6d34717fe0570afce07ee79b8eeb40341f831CNA
Linuxbf355b8d2c30a289232042cacc1cfaea4923936c – < 3ddd55cf19ed6cc62def5e3af10c2a9df1b861c33ddd55cf19ed6cc62def5e3af10c2a9df1b861c3CNA
Linuxbf355b8d2c30a289232042cacc1cfaea4923936c – < b3967c493799e63f648e9c7b6cb063aa2aed04e7b3967c493799e63f648e9c7b6cb063aa2aed04e7CNA
Linuxbf355b8d2c30a289232042cacc1cfaea4923936c – < f7878d47560d61e3f370aca3cebb8f42a55b990af7878d47560d61e3f370aca3cebb8f42a55b990aCNA
Linuxbf355b8d2c30a289232042cacc1cfaea4923936c – < a458b2902115b26a25d67393b12ddd57d1216aaaa458b2902115b26a25d67393b12ddd57d1216aaaCNA
Linux4.10–CNA
SIMATIC CN 4100< V5.0V5.0siemens-SADP
Scores by source
Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total