VULNERABILITY INTELLIGENCE

CVE-2025-38120

CVSS score9.4 CRITICAL
EPSS probability0.51%
CISA KEVNot currently listed
Published2025-07-03
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_set_pipapo_avx2: fix initial map fill If the first field doesn't cover the entire start map, then we must zero out the remainder, else we leak those bits into the next match round map. The early fix was incomplete and did only fix up the generic C implementation. A followup patch adds a test case to nft_concat_range.sh.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references