PT-2025-27971 · Linux+3 · Linux Kernel+3

Published 2025-07-04 · Updated 2025-11-18 · CVE-2025-38196

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc7-syzkaller-gd7fa1af5b33e

Description: A vulnerability in the Linux kernel has been resolved, related to the io uring/rsrc module. The issue occurs when the buffer count with offset for cloning exceeds the maximum allowed limit, triggering a WARN ON() for kmalloc() attempt that's too big. This is due to the registration code only checking the total count of buffers, but not the offset + count, which can exceed the IORING MAX REG BUFFERS limit.

Recommendations: For Linux kernel versions prior to 6.15.0-rc7-syzkaller-gd7fa1af5b33e, update to a newer version that includes the fix for the io uring/rsrc vulnerability. As a temporary workaround, consider restricting the use of the io uring/rsrc module to minimize the risk of exploitation. Avoid using the io clone buffers function with large buffer counts and offsets until the issue is resolved.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2025-13476

CVE-2025-38196

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 207

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38196.json · Exploit
• https://ubuntu.com/security/CVE-2025-38391 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38408 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7834-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38340 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38523 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38246 · Vendor Advisory
• https://git.kernel.org/stable/c/0e23ac818f3afb16660b0ba384875d56a7013879 · Patch
• https://ubuntu.com/security/CVE-2025-38334 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38087 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38405 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7856-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38385 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7833-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38406 · Vendor Advisory