PT-2025-25821 · Linux+1 · Linux Kernel+1

Published 2025-06-18 · Updated 2026-02-05 · CVE-2025-38046

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises from compatibility problems between Linux and XenServer on Windows machines, where a platform device with ID 2 is used instead of the expected ID 1. This discrepancy causes Linux to crash due to missing initialization, specifically grant tables, when it detects Xen but cannot find the expected Xen platform device. The problem is identified by a crash in the gnttab expand function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-664

Related Identifiers

BDU:2026-03412

CVE-2025-38046

Affected Products

Linux Kernel

Red Os

References · 22

• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38046 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03412 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-38046 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-38046 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38046 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38046 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-38046 · Security Note
• https://redos.red-soft.ru/support/secure · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-kernel-lt-cve-2025-38046-8.0 · Note
• https://git.kernel.org/stable/c/f5363ffdabc2a281bd0023584944e3d0c25dfcd3 · Note
• https://git.kernel.org/stable/c/02d850de9495699f2029886a6a69f0ed07a39b84 · Note
• https://twitter.com/CVEnew/status/1935274845253812657 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti-red-os-8-0/uyazvimost-kernel-lt-cve-2025-38046-8.0/?sphrase_id=1456269 · Note
• https://git.kernel.org/linus/2356f15caefc0cc63d9cc5122641754f76ef9b25 · Note
• https://twitter.com/VulmonFeeds/status/1935381033303568397 · Twitter Post