Log in Start free

Vulnerability · Published Sep 3, 2025 · Assigned by Linux

CVE-2025-38678netfilter: nf_tables: reject duplicate device on updates

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 78.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject duplicate device on updates A chain/flowtable update with duplicated devices in the same batch is possible. Unfortunately, netdev event path only removes the first device that is found, leaving unregistered the hook of the duplicated device. Check if a duplicated device exists in the transaction batch, bail out with EEXIST in such case. WARNING is hit when unregistering the hook: [49042.221275] WARNING: CPU: 4 PID: 8425 at net/netfilter/core.c:340 nf_hook_entry_head+0xaa/0x150 [49042.221375] CPU: 4 UID: 0 PID: 8425 Comm: nft Tainted: G S 6.16.0+ #170 PREEMPT(full) [...] [49042.221382] RIP: 0010:nf_hook_entry_head+0xaa/0x150

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.159-1DEBIAN-CVE-2025-38678
Debian:13linux6.12.63-1DEBIAN-CVE-2025-38678
Debian:14linux6.16.3-1DEBIAN-CVE-2025-38678
Ubuntu:22.04:LTSlinux5.15.0-163.173UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux6.8.0-88.89USN-7889-1
Ubuntu:24.04:LTSlinux6.8.0-88.89UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-aws5.15.0-1097.104UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-aws6.8.0-1043.45UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-aws6.8.0-1043.45USN-7889-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-aws-6.146.14.0-1017.17~24.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1043.45~22.04.1USN-7889-1
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1043.45~22.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-azure5.15.0-1101.110UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-azure6.8.0-1044.50UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-azure6.8.0-1044.50USN-7935-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-azure-6.146.14.0-1017.17~24.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1044.50~22.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1044.50~22.04.1USN-7935-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1102.111.1UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1046.53UBUNTU-CVE-2025-38678
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1046.53~22.04.1UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1029.32UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-gcp5.15.0-1097.106UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-gcp6.8.0-1044.47UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-gcp6.8.0-1044.47USN-7889-4
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-gcp-6.146.14.0-1020.21~24.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1044.47~22.04.1USN-7889-4
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1044.47~22.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-gke5.15.0-1093.99UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-gke6.8.0-1040.45UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-gke6.8.0-1040.45USN-7889-4
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1080.88UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1027.30UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1027.30USN-7889-4
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-88.89~22.04.2UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-88.89~22.04.2USN-7889-6
Ubuntu:22.04:LTSlinux-ibm5.15.0-1091.94UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-ibm6.8.0-1041.41USN-7889-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1041.41UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1041.41~22.04.1USN-7889-5
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1041.41~22.04.1UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1092.98UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-kvm5.15.0-1089.94UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-163.173UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-88.89.1USN-7889-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-88.89.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-88.89.1~22.04.1USN-7889-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-88.89.1~22.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1092.93UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1043.46USN-7889-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1043.46UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1043.46~22.04.1USN-7889-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1043.46~22.04.1UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1043.46.1UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1043.46.1USN-7889-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1049.49UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1013.13UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1038.38UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-oem-6.146.14.0-1016.16UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-oracle5.15.0-1094.100UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-oracle6.8.0-1040.41USN-7889-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1040.41UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-oracle-6.146.14.0-1017.17~24.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1040.41~22.04.1USN-7889-6
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1040.41~22.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-raspi5.15.0-1091.94UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-raspi6.8.0-1043.47UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-raspi6.8.0-1043.47USN-7889-7
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-riscv-6.146.14.0-36.36.1~24.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-88.89~22.04.1UBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-38678
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1020.21UBUNTU-CVE-2025-38678
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1020.21USN-7889-7
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1061.65UBUNTU-CVE-2025-38678

Affected products (as reported)

VendorProductVersions
Linux Linux 78d9f48f7f44431a25da2b46b3a8812f6ff2b981 – before 0521e694d5b80899fba8695881a6349f9bc538cb78d9f48f7f44431a25da2b46b3a8812f6ff2b981 – before 4681960bc0f4f8bcc782cbf2fd205f48ad314dfd78d9f48f7f44431a25da2b46b3a8812f6ff2b981 – before 4ce2a0c3b8497a66cfc25fc7ca3d087258a785d278d9f48f7f44431a25da2b46b3a8812f6ff2b981 – before 3f358a66a04513311668ea4b40f5064e253d838678d9f48f7f44431a25da2b46b3a8812f6ff2b981 – before cf23d531a9d496863aa4c5a0e2f71f0a23f3df3c78d9f48f7f44431a25da2b46b3a8812f6ff2b981 – before d7615bde541f16517d6790412da6ec46fa8a4c1f78d9f48f7f44431a25da2b46b3a8812f6ff2b981 – before cf5fb87fcdaaaafec55dcc0dc5a9e15ead343973
Linux Linux 5.8

References