PT-2025-33767 · Linux+6 · Linux Kernel+6
Published
2025-08-05
·
Updated
2026-04-20
·
CVE-2025-38568
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A stack out-of-bounds write issue exists in the
tc entry parsing within the mqprio module of the Linux kernel. The TCA MQPRIO TC ENTRY INDEX is validated using NLA POLICY MAX(NLA U32, TC QOPT MAX QUEUE), allowing a value of TC QOPT MAX QUEUE (16). This leads to a 4-byte out-of-bounds write in the fp[] array, which has a capacity of 16 elements (0–15).Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Validation of Array Index
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Rocky Linux
Suse
Ubuntu