CVE-2025-22103

CVE-2025-22103 is a bug in the Linux operating system that affects how it handles certain virtual network interfaces called IPvlan interfaces, specifically when they're running in a special mode called L3S (Layer 3 Simplified). These virtual interfaces are often used in advanced networking setups, like containers or virtual machines.

The problem happens when one of these virtual interfaces is being deleted. If the system is still trying to use it at the exact moment it's being removed, Linux might try to access something that's already gone. This leads to a situation where the system hits an error and crashes completely — resulting in a kernel panic (essentially a Linux version of a system-wide crash).

The root of the problem is that Linux doesn't always wait for things to finish properly before cleaning up, which opens a short window where one part of the system thinks the interface still exists, while another part has already removed it.

The issue has been fixed in newer versions of the Linux kernel (starting from version 6.15-rc1), so applying the latest updates will prevent this crash from occurring.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.