PT-2025-27976 · Linux+4 · Linux Kernel+4

Published 2025-07-04 · Updated 2026-06-16 · CVE-2025-38201

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, specifically in the netfilter component, where the maximum map bucket size was not properly clamped to INT MAX. This could lead to issues when resizing a hashtable, potentially triggering a WARN ON ONCE in kvmalloc node noprof() due to GFP NOWARN being unset. The fix is similar to a previous patch that clamped the maximum hashtable size to INT MAX in the conntrack module.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

AZL-70418

BDU:2025-10767

CVE-2025-38201

ECHO-6330-A7D5-3345

OESA-2025-2120

OESA-2025-2121

OESA-2025-2122

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03272-1

SUSE-SU-2025:03290-1

SUSE-SU-2025:03301-1

SUSE-SU-2025:03382-1

SUSE-SU-2025:03602-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20653-1

SUSE-SU-2025:20669-1

SUSE-SU-2025:20739-1

SUSE-SU-2025:20756-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_03272-1

SUSE-SU-2025_03290-1

SUSE-SU-2025_03301-1

SUSE-SU-2025_03382-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

USN-8278-1

USN-8278-2

USN-8289-1

USN-8289-2

USN-8296-1

USN-8296-2

USN-8393-1

USN-8440-1

Affected Products

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 2448

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38201.json · Exploit
• https://ubuntu.com/security/CVE-2025-68744 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68808 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46323 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68774 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23038 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68787 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68261 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03290-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22106 · Security Note
• https://ubuntu.com/security/CVE-2025-38400 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23176 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23159 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68266 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38541 · Vendor Advisory