CVE-2025-61107: 
Linux Debian vulnerability analysis and mitigation

FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the showvtyextprefprefsid function at ospfext.c. This vulnerability was assigned CVE-2025-61107 and was disclosed on October 28, 2025 (NVD).

The vulnerability occurs when the command 'debug ospf packet all send/recv detail' is enabled in the OSPF configuration. When ospfd processes an LS Update packet containing an opaque LSA, a NULL pointer dereference occurs in showopaqueinfodetail() within ospfd/ospfext.c. The vulnerability has been assigned a CVSS v3.1 base score of 7.5 HIGH with vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD).

This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LSA Update packet. When exploited, it results in the crash of the ospfd daemon, disrupting OSPF routing operations (NVD).

A fix has been developed and submitted through a pull request that adds proper NULL pointer checks in the affected functions. The patch adds security checks for VTY context and ensures proper validation of pointers related to Opaque LSAs dumping (GitHub PR).