VULNERABILITY INTELLIGENCE
CVE-2025-38408
CVSS score7.8 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2025-07-25
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize `ops` member's pointers properly by using kzalloc() instead of kmalloc() when allocating the simulation work context. Otherwise the pointers contain random content leading to invalid dereferencing.
Weakness classification
- nvd@nist.gov: CWE-476