1. Home
  2. Vulnerabilities
  3. CVE-2025-40282
0.0
NA
CVE-2025-40282
Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth 6lowpan.c netdev has header_ops, so it must set link-local header for RX skb, otherwise things crash, eg. with AF_PACKET SOCK_RAW Add missing skb_reset_mac_header() for uncompressed ipv6 RX path. For the compressed one, it is done in lowpan_header_decompress(). Log: (BlueZ 6lowpan-tester Client Recv Raw - Success) ------ kernel BUG at net/core/skbuff.c:212! Call Trace: <IRQ> ... packet_rcv (net/packet/af_packet.c:2152) ... <TASK> __local_bh_enable_ip (kernel/softirq.c:407) netif_rx (net/core/dev.c:5648) chan_recv_cb (net/bluetooth/6lowpan.c:294 net/bluetooth/6lowpan.c:359) ------

INFO

Published Date :

Dec. 6, 2025, 10:15 p.m.

Last Modified :

Dec. 6, 2025, 10:15 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2025-40282 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
: Total Affected Vendor : 1 | Products : 1
Solution
Apply the patch to the Linux kernel to fix the Bluetooth 6lowpan header processing issue.
  • Apply the provided patch to the Linux kernel.
  • Recompile the kernel with the fix.
  • Install the updated kernel.
  • Reboot the system to load the new kernel.
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2025-40282.

URL Resource
https://git.kernel.org/stable/c/11cd7e068381666f842ad41d1cc58eecd0c75237
https://git.kernel.org/stable/c/3b78f50918276ab28fb22eac9aa49401ac436a3b
https://git.kernel.org/stable/c/4ebb90c3c309e6375dc3e841af92e2a039843e62
https://git.kernel.org/stable/c/70d84e7c3a44b81020a3c3d650a64c63593405bd
https://git.kernel.org/stable/c/973e0271754c77db3e1b6b69adf2de85a79a4c8b
https://git.kernel.org/stable/c/c24ac6cfe4f9a47180a65592c47e7a310d2f9d93
https://git.kernel.org/stable/c/d566e9a2bfc848941b091ffd5f4e12c4e889d818
https://git.kernel.org/stable/c/ea46a1d217bc82e01cf3d0424e50ebfe251e34bf
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-40282 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-40282 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2025-40282 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2025-40282 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Dec. 06, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth 6lowpan.c netdev has header_ops, so it must set link-local header for RX skb, otherwise things crash, eg. with AF_PACKET SOCK_RAW Add missing skb_reset_mac_header() for uncompressed ipv6 RX path. For the compressed one, it is done in lowpan_header_decompress(). Log: (BlueZ 6lowpan-tester Client Recv Raw - Success) ------ kernel BUG at net/core/skbuff.c:212! Call Trace: <IRQ> ... packet_rcv (net/packet/af_packet.c:2152) ... <TASK> __local_bh_enable_ip (kernel/softirq.c:407) netif_rx (net/core/dev.c:5648) chan_recv_cb (net/bluetooth/6lowpan.c:294 net/bluetooth/6lowpan.c:359) ------
    Added Reference https://git.kernel.org/stable/c/11cd7e068381666f842ad41d1cc58eecd0c75237
    Added Reference https://git.kernel.org/stable/c/3b78f50918276ab28fb22eac9aa49401ac436a3b
    Added Reference https://git.kernel.org/stable/c/4ebb90c3c309e6375dc3e841af92e2a039843e62
    Added Reference https://git.kernel.org/stable/c/70d84e7c3a44b81020a3c3d650a64c63593405bd
    Added Reference https://git.kernel.org/stable/c/973e0271754c77db3e1b6b69adf2de85a79a4c8b
    Added Reference https://git.kernel.org/stable/c/c24ac6cfe4f9a47180a65592c47e7a310d2f9d93
    Added Reference https://git.kernel.org/stable/c/d566e9a2bfc848941b091ffd5f4e12c4e889d818
    Added Reference https://git.kernel.org/stable/c/ea46a1d217bc82e01cf3d0424e50ebfe251e34bf
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.