CVE-2025-38120

MEDIUM

Linux Kernel - Information Disclosure via Uninitialized Map Bits in nf_set_pipapo_avx2

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo_avx2: fix initial map fill If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map. The early fix was incomplete and did only fix up the generic C implementation. A followup patch adds a test case to nft_concat_range.sh.

References (8)

Core 8

Scores

CVSS v3 5.5
EPSS 0.0011
EPSS Percentile 28.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (27)
debian/debian_linux 11.0
linux/Kernel < 5.15.186linux
linux/Kernel 5.16.0 - 6.1.142linux
linux/Kernel 6.11.0 - 6.15.3linux
linux/Kernel 6.2.0 - 6.6.94linux
linux/Kernel 6.7.0 - 6.12.34linux
Linux/Linux < 6.11
Linux/Linux 5.15.165 - 5.15.186
Linux/Linux 5.15.186 - 5.15.*
Linux/Linux 6.1.103 - 6.1.142
... and 17 more
Published Jul 03, 2025
Tracked Since Feb 18, 2026