PT-2025-34384 · Linux+5 · Linux Kernel+5
Published
2025-01-01
·
Updated
2026-04-20
·
CVE-2025-38622
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.16.0-rc7
Description:
A flaw exists in the Linux kernel related to handling UDP packets with specific configurations. Specifically, when a packet with a virtio net hdr is sent to a tun device with SKB GSO UDP and a gso size less than the udphdr size, a kernel crash can occur within the
skb pull rcsum function. This issue is triggered when the UDP encapsulation option UDP ENCAP ESPINUDP is enabled, leading to a segmentation fault during UDP receive processing. The vulnerability arises from segmentation introduced in the UDP receive path intended only for GRO (Generic Receive Offload), which was not designed for UFO (UDP Fragmentation Offload) packets.Recommendations:
Linux kernel versions prior to 6.16.0-rc7 should be updated.
Exploit
Fix
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu