CVE-2025-38408

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38408
In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize `ops` member's pointers properly by using kzalloc() instead of kmalloc() when allocating the simulation work context. Otherwise the pointers contain random content leading to invalid dereferencing.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/19bd7597858dd15802c1d99fcc38e528f469080a Patch
https://git.kernel.org/stable/c/7f73d1def72532bac4d55ea8838f457a6bed955c Patch
https://git.kernel.org/stable/c/8a2277a3c9e4cc5398f80821afe7ecbe9bdf2819 Patch
https://git.kernel.org/stable/c/ec3656a8cb428d763def32bc2fa695f94be23629
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*
History

11 Jan 2026, 17:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/ec3656a8cb428d763def32bc2fa695f94be23629 -

19 Nov 2025, 18:19

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: genirq/irq_sim: Inicializar correctamente los punteros del contexto de trabajo. Inicializar correctamente los punteros del miembro `ops` usando kzalloc() en lugar de kmalloc() al asignar el contexto de trabajo de simulación. De lo contrario, los punteros contienen contenido aleatorio, lo que provoca una desreferenciación no válida.
References () https://git.kernel.org/stable/c/19bd7597858dd15802c1d99fcc38e528f469080a - () https://git.kernel.org/stable/c/19bd7597858dd15802c1d99fcc38e528f469080a - Patch
References () https://git.kernel.org/stable/c/7f73d1def72532bac4d55ea8838f457a6bed955c - () https://git.kernel.org/stable/c/7f73d1def72532bac4d55ea8838f457a6bed955c - Patch
References () https://git.kernel.org/stable/c/8a2277a3c9e4cc5398f80821afe7ecbe9bdf2819 - () https://git.kernel.org/stable/c/8a2277a3c9e4cc5398f80821afe7ecbe9bdf2819 - Patch

25 Jul 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-25 14:15

Updated : 2026-01-11 17:15

NVD link : CVE-2025-38408

Mitre link : CVE-2025-38408

CVE.ORG link : CVE-2025-38408

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference