CVE-2025-38470

A flaw was found in the Linux kernel's VLAN (Virtual Local Area Network) implementation. This vulnerability allows an authorized local user with network administration privileges to cause a Denial of Service (DoS) through a kernel crash or system memory exhaustion. The issue stems from a reference counting imbalance when dynamically toggling receiver VLAN filtering on active network interfaces.

Red Hat has evaluated this vulnerability as Moderate because exploiting it requires local administrative privileges (specifically CAP_NET_ADMIN) to manipulate network interfaces, restricting the threat to privileged local users or compromised privileged containers. The flaw cannot be triggered remotely over the network and demands an atypical sequence of administrative actions involving toggling receiver VLAN filtering on a running interface while configuring VLAN zero devices. Successful exploitation results exclusively in a local denial of service via a kernel crash or memory leakage, without allowing code execution or data exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.