CVE-2025-0244

What it actually does

Redirect to an invalid protocol scheme allows spoofing of the address bar on Android systems.

Why it matters to the business

Users can be tricked into visiting malicious sites while believing they are on legitimate ones, increasing phishing risk and eroding trust in the application across affected deployments.

How an attack unfolds

An attacker supplies a redirect using an invalid protocol scheme that the application mishandles, resulting in a spoofed address bar display that conceals the true destination.

How to fix it

Upgrade linux-lts (Alpaquita:stream) to 6.12.58-r0 and linux-lts (Alpaquita:25) to 6.12.58-r0. Verify the update resolves address bar handling for redirects.

How to confirm the fix worked

Confirm installed package versions match or exceed the fixed releases and test redirect behavior with invalid protocol schemes on Android to ensure the address bar is no longer spoofable.

Typical attack path

1. Attacker crafts a URL containing a redirect to an invalid protocol scheme
2. Victim is induced to follow the link on an affected Android system
3. Application processes the redirect without properly validating the scheme
4. Address bar displays a spoofed location while loading attacker-controlled content

How to detect it

Examine web or application logs for redirects involving non-standard or invalid protocol schemes; correlate with user reports of unexpected address bar content on Android devices.

What your security team should do

• Apply the listed package updates immediately on all affected systems
• Monitor for new releases or backports given the stable but non-zero EPSS score
• Review Android-specific browser or redirect handling configurations for additional hardening