PT-2025-30831 · Linux+4 · Linux Kernel+4

Published 2025-01-01 · Updated 2026-05-26 · CVE-2025-38426

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel where insufficient validation of the RAS header read from EEPROM could lead to excessive memory allocation when the header is corrupted. This can occur when reading records.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

AZL-65735

AZL-70501

BDU:2025-09254

CVE-2025-38426

ECHO-1FB1-123E-7A80

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:02853-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:02969-1

SUSE-SU-2025:02996-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:03023-1

SUSE-SU-2025:20577-1

SUSE-SU-2025:20586-1

SUSE-SU-2025:20601-1

SUSE-SU-2025:20602-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02969-1

SUSE-SU-2025_02996-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

SUSE-SU-2025_03023-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 2096

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38426.json · Exploit
• https://ubuntu.com/security/CVE-2025-38396 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38421 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-38426 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38371 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21139-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b52f52bc5ba9feb026c0be600f8ac584fd12d187 · Patch
• https://ubuntu.com/security/CVE-2025-38226 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38332 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38189 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38230 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38250 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38245 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38376 · Vendor Advisory