PT-2025-29061 · Linux+4 · Linux Kernel+4

Published

2025-04-22

·

Updated

2025-11-25

·

CVE-2025-38339

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A flaw exists in the Linux kernel related to the JIT code size calculation of BPF trampolines on the powerpc architecture. The arch bpf trampoline size() function provides a JIT size for the BPF trampoline before the buffer is allocated. The size calculation can vary depending on the image location, potentially leading to a warning if the calculated size is less than the actual size needed during JIT compilation. This can occur when there is a dependency with image location for JIT'ing.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

Related Identifiers

BDU:2025-08800
CVE-2025-38339
OPENSUSE-SU-2025:20081-1
SUSE-SU-2025:21074-1
SUSE-SU-2025:21139-1
SUSE-SU-2025:21179-1
USN-7833-1
USN-7833-2
USN-7833-3
USN-7833-4
USN-7834-1
USN-7856-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu