PT-2025-33568 · Linux+3 · Linux Kernel+3

Published 2025-07-17 · Updated 2025-12-15 · CVE-2025-38525

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw exists in the Linux kernel related to interrupt handling within the rxrpc subsystem. Specifically, the rxrpc assess MTU size() function, called from rxrpc new incoming call(), can lead to a warning when interrupts are disabled due to a call to local bh enable() within the IP layer. This occurs during the assessment of the MTU size for incoming calls. The issue is resolved by moving the call to rxrpc assess MTU size() to a point in the stack where interrupts are not disabled.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-387

Related Identifiers

BDU:2026-03111

CVE-2025-38525

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7934-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 231

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38525.json · Exploit
• https://ubuntu.com/security/CVE-2025-38612 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38515 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38666 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38664 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38473 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38526 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38507 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7879-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38351 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38585 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38561 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38491 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38628 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38619 · Vendor Advisory