CVE-2025-38201

HIGH

Linux Kernel - Denial of Service via Integer Overflow in nft_set_pipapo Bucket Size

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof() when resizing hashtable because __GFP_NOWARN is unset. Similar to: b541ba7d1f5a ("netfilter: conntrack: clamp maximum hashtable size to INT_MAX")

References (9)

Core 9

Scores

CVSS v3 7.8
EPSS 0.0019
EPSS Percentile 8.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (23)
linux/Kernel 5.11.0 - 5.15.200linux
linux/Kernel 5.16.0 - 6.1.163linux
linux/Kernel 5.6.0 - 5.10.250linux
linux/Kernel 6.13.0 - 6.15.4linux
linux/Kernel 6.2.0 - 6.6.124linux
linux/Kernel 6.7.0 - 6.12.35linux
Linux/Linux < 5.6
Linux/Linux 3c4287f62044a90e73a561aa05fc46e62da173da - 0ab3de047808f375a36cd345225572eb3366f3c6
Linux/Linux 3c4287f62044a90e73a561aa05fc46e62da173da - 1fe27f97944017a9d3c5af4d6d95282bff0f1147
Linux/Linux 3c4287f62044a90e73a561aa05fc46e62da173da - 4abccfb61f422300be014b8e734c63344306f009
... and 13 more
Published Jul 04, 2025
Tracked Since Feb 18, 2026