CVE-2025-38408

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38408
In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize `ops` member's pointers properly by using kzalloc() instead of kmalloc() when allocating the simulation work context. Otherwise the pointers contain random content leading to invalid dereferencing.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/186df821de0f34490ed5fc0861243748b2483861 Patch
https://git.kernel.org/stable/c/19bd7597858dd15802c1d99fcc38e528f469080a Patch
https://git.kernel.org/stable/c/7f73d1def72532bac4d55ea8838f457a6bed955c Patch
https://git.kernel.org/stable/c/8a2277a3c9e4cc5398f80821afe7ecbe9bdf2819 Patch
https://git.kernel.org/stable/c/c71aa4bb528ae6f8fd7577a0a39e5a03c60b04fb Patch
https://git.kernel.org/stable/c/ec3656a8cb428d763def32bc2fa695f94be23629 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*
History

17 Mar 2026, 13:42

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/186df821de0f34490ed5fc0861243748b2483861 - () https://git.kernel.org/stable/c/186df821de0f34490ed5fc0861243748b2483861 - Patch
References () https://git.kernel.org/stable/c/c71aa4bb528ae6f8fd7577a0a39e5a03c60b04fb - () https://git.kernel.org/stable/c/c71aa4bb528ae6f8fd7577a0a39e5a03c60b04fb - Patch
References () https://git.kernel.org/stable/c/ec3656a8cb428d763def32bc2fa695f94be23629 - () https://git.kernel.org/stable/c/ec3656a8cb428d763def32bc2fa695f94be23629 - Patch

06 Feb 2026, 17:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/186df821de0f34490ed5fc0861243748b2483861 -
  • () https://git.kernel.org/stable/c/c71aa4bb528ae6f8fd7577a0a39e5a03c60b04fb -

11 Jan 2026, 17:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/ec3656a8cb428d763def32bc2fa695f94be23629 -

19 Nov 2025, 18:19

Type Values Removed Values Added
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: genirq/irq_sim: Inicializar correctamente los punteros del contexto de trabajo. Inicializar correctamente los punteros del miembro `ops` usando kzalloc() en lugar de kmalloc() al asignar el contexto de trabajo de simulación. De lo contrario, los punteros contienen contenido aleatorio, lo que provoca una desreferenciación no válida.
References () https://git.kernel.org/stable/c/19bd7597858dd15802c1d99fcc38e528f469080a - () https://git.kernel.org/stable/c/19bd7597858dd15802c1d99fcc38e528f469080a - Patch
References () https://git.kernel.org/stable/c/7f73d1def72532bac4d55ea8838f457a6bed955c - () https://git.kernel.org/stable/c/7f73d1def72532bac4d55ea8838f457a6bed955c - Patch
References () https://git.kernel.org/stable/c/8a2277a3c9e4cc5398f80821afe7ecbe9bdf2819 - () https://git.kernel.org/stable/c/8a2277a3c9e4cc5398f80821afe7ecbe9bdf2819 - Patch
First Time Linux
Linux linux Kernel

25 Jul 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-25 14:15

Updated : 2026-03-17 13:42

NVD link : CVE-2025-38408

Mitre link : CVE-2025-38408

CVE.ORG link : CVE-2025-38408

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference