CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
In the Linux kernel, the following vulnerability has been resolved:
net: pktgen: fix access outside of user given buffer in pktgenthreadwrite()
Honour the user given buffer size for the strnlen() calls (otherwise strnlen() will access memory outside of the user given buffer).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38061?
The severity of CVE-2025-38061 is classified as medium due to potential memory access issues.
How do I fix CVE-2025-38061?
To fix CVE-2025-38061, upgrade to the latest stable version of the Linux kernel that includes the patch.
What does CVE-2025-38061 affect?
CVE-2025-38061 affects the Linux Kernel specifically in the pktgen component.
What type of vulnerability is CVE-2025-38061?
CVE-2025-38061 is a memory access vulnerability that involves improper handling of user-given buffer sizes.
Is CVE-2025-38061 being actively exploited?
As of now, there are no known active exploits for CVE-2025-38061 in the wild.