PT-2025-27975 · Linux+10 · Linux Kernel+10

Published 2025-03-11 · Updated 2026-04-20 · CVE-2025-38200

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to an integer underflow that can occur when a device sends a specific input, leading to MMIO write access to an invalid page in the i40e clear hw function. This is resolved by changing the type of related variables to prevent the integer underflow.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

ALSA-2025:14438

ALSA-2025:14510

ALSA-2025:15011

AZL-64713

BDU:2025-09174

CESA-2025_14438

CVE-2025-38200

DLA-4327-1

DLA-4328-1

DSA-5973-1

ECHO-1747-7F1F-19C1

INFSA-2025_14438

INFSA-2025_15011

MGASA-2025-0218

MGASA-2025-0219

OESA-2025-1926

OESA-2025-1927

OESA-2025-1928

RHSA-2025:14438

RHSA-2025:14510

RHSA-2025:17109

RHSA-2025:17161

RHSA-2025:20095

RHSA-2025_14438

RHSA-2025_15011

SUSE-SU-2025:02588-1

SUSE-SU-2025:02844-1

SUSE-SU-2025:02844-2

SUSE-SU-2025:02846-1

SUSE-SU-2025:02848-1

SUSE-SU-2025:02849-1

SUSE-SU-2025:02850-1

SUSE-SU-2025:02851-1

SUSE-SU-2025:02852-1

SUSE-SU-2025:02853-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:02969-1

SUSE-SU-2025:02996-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:03023-1

SUSE-SU-2025:20577-1

SUSE-SU-2025:20586-1

SUSE-SU-2025:20601-1

SUSE-SU-2025:20602-1

SUSE-SU-2025:2588-1

SUSE-SU-2025_02588-1

SUSE-SU-2025_02844-1

SUSE-SU-2025_02844-2

SUSE-SU-2025_02846-1

SUSE-SU-2025_02848-1

SUSE-SU-2025_02849-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02969-1

SUSE-SU-2025_02996-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

SUSE-SU-2025_03023-1

USN-7774-1

USN-7774-2

USN-7774-3

USN-7774-4

USN-7774-5

USN-7775-1

USN-7775-2

USN-7775-3

USN-7776-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 2577

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38200.json · Exploit
• https://ubuntu.com/security/CVE-2025-68237 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38279 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38242 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22125 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39746 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38439 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39675 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1926 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40323 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38169 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38068 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7833-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37819 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02969-1 · Vendor Advisory