PT-2025-30880 · Linux+5 · Linux Kernel+5

Published 2025-01-01 · Updated 2026-04-20 · CVE-2025-38466

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a flaw where uprobes could be misused destructively when placed within an instruction. The kernel validated the presence of a valid instruction at the specified offset but did not account for variable instruction lengths, potentially leading to misinterpretation of the execution stream. Additionally, on architectures that intermix data within the text segment, data could be misinterpreted as an instruction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

AZL-65699

AZL-72959

BDU:2025-09819

CVE-2025-38466

DLA-4327-1

DLA-4328-1

DSA-5973-1

DSA-5975-1

ECHO-EF40-268E-B45F

MGASA-2025-0218

MGASA-2025-0219

OESA-2025-1924

OESA-2025-1925

OESA-2025-1959

OESA-2025-1960

OESA-2025-1961

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03600-1

SUSE-SU-2025:03601-1

SUSE-SU-2025:03602-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025:3725-1

SUSE-SU-2025:3751-1

USN-7774-1

USN-7774-2

USN-7774-3

USN-7774-4

USN-7774-5

USN-7775-1

USN-7775-2

USN-7775-3

USN-7776-1

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7934-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3168

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38466.json · Exploit
• https://ubuntu.com/security/CVE-2025-38145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40238 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38714 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40169 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40105 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38474 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40070 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-37957 · Security Note
• https://ubuntu.com/security/notices/USN-7774-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory