You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2025 40282
About this tag
CVE-2025-40282 is a Linux kernel vulnerability affecting Bluetooth 6LoWPAN support. The bug occurs when the kernel fails to reset the link-local (MAC) header on received IPv6 packets in the uncompressed receive path. A crafted packet can trigger a kernel BUG and crash the host if the 6LoWPAN Bluetooth stack and packet sockets are present. A patch has been issued to fix the issue by ensuring skb_reset_mac_header is called properly. This tag covers discussions about the vulnerability, its impact on Linux systems, and the patch that prevents crashes.
A subtle but real kernel bug affecting Bluetooth 6LoWPAN support in Linux — tracked as CVE-2025-40282 — has been identified and patched: the kernel failed to reset the link-local (MAC) header on received IPv6 packets in the uncompressed receive path, allowing a crafted packet to trigger a kernel...