PT-2025-30808 · Linux+5 · Linux Kernel+5

Published 2025-01-01 · Updated 2026-05-22 · CVE-2025-38408

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue in the genirq/irq sim component. Improper initialization of work context pointers within the simulation work context, due to the use of kmalloc() instead of kzalloc() for allocation, can lead to invalid dereferencing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

NULL Pointer Dereference

Weakness Enumeration

CWE-665

CWE-476

Related Identifiers

AZL-70498

BDU:2025-09131

CVE-2025-38408

ECHO-CF2E-630B-C0B2

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03600-1

SUSE-SU-2025:03601-1

SUSE-SU-2025:03602-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025:3725-1

SUSE-SU-2025:3751-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

USN-8162-1

USN-8180-1

USN-8180-2

USN-8180-3

USN-8180-4

USN-8180-5

USN-8180-6

USN-8186-1

USN-8187-1

USN-8188-1

USN-8243-1

USN-8275-1

USN-8297-1

Affected Products

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3305

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38408.json · Exploit
• https://ubuntu.com/security/CVE-2026-23083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38632 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71137 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68311 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38490 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68813 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38646 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38515 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40030 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39682 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40149 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38174 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8028-2 · Vendor Advisory