PT-2025-33811 · Linux+1 · Linux Kernel+1

Published 2025-06-23 · Updated 2025-11-26 · CVE-2025-38613

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains an issue in the staging/gpib subsystem where an uninitialized padding field within the gpib board info ioctl structure is copied back to userspace via the board info ioctl function. This occurs due to the introduction of a padding field, resulting in unassigned padding fields being present on the stack frame.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Improper Initialization

Weakness Enumeration

CWE-908

CWE-665

Related Identifiers

BDU:2026-02823

CVE-2025-38613

Affected Products

Astra Linux

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38613.json · Exploit
• https://bdu.fstec.ru/vul/2026-02823 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38613 · Security Note
• https://git.kernel.org/stable/c/19dedd4f70f5a6505e7c601ef7dd40542d1d9aa5 · Patch
• https://osv.dev/vulnerability/CVE-2025-38613 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38613 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-38613 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38613 · Vendor Advisory
• https://git.kernel.org/stable/c/a739d3b13bff0dfa1aec679d08c7062131a2a425 · Patch
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.16.0 · Note
• https://twitter.com/CVEnew/status/1957854116467863743 · Twitter Post
• https://lore.kernel.org/linux-cve-announce/2025081924-CVE-2025-38613-8505@gregkh · Note
• https://git.kernel.org/linus/a739d3b13bff0dfa1aec679d08c7062131a2a425 · Note
• https://t.me/cveNotify/144118 · Telegram Post