CVE-2025-38441: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: account for Ethernet header in nfflowpppoeproto()
syzbot found a potential access to uninit-value in nfflowpppoeproto()
Blamed commit forgot the Ethernet header.
BUG: KMSAN: uninit-value in nfflowoffloadinethook+0x7e4/0x940 net/netfilter/nfflowtableinet.c:27 nfflowoffloadinethook+0x7e4/0x940 net/netfilter/nfflowtableinet.c:27 nfhookentryhookfn include/linux/netfilter.h:157 [inline] nfhookslow+0xe1/0x3d0 net/netfilter/core.c:623 nfhookingress include/linux/netfilternetdev.h:34 [inline] nfingress net/core/dev.c:5742 [inline] netifreceiveskbcore+0x4aff/0x70c0 net/core/dev.c:5837 netifreceiveskbonecore net/core/dev.c:5975 [inline] netifreceiveskb+0xcc/0xac0 net/core/dev.c:6090 netifreceiveskbinternal net/core/dev.c:6176 [inline] netifreceiveskb+0x57/0x630 net/core/dev.c:6235 tunrxbatched+0x1df/0x980 drivers/net/tun.c:1485 tungetuser+0x4ee0/0x6b40 drivers/net/tun.c:1938 tunchrwriteiter+0x3e9/0x5c0 drivers/net/tun.c:1984 newsyncwrite fs/readwrite.c:593 [inline] vfswrite+0xb4b/0x1580 fs/readwrite.c:686 ksyswrite fs/readwrite.c:738 [inline] dosyswrite fs/readwrite.c:749 [inline]
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38441?
CVE-2025-38441 has a medium severity rating due to the potential access to uninitialized memory.
How do I fix CVE-2025-38441?
To fix CVE-2025-38441, ensure you update your Linux kernel to the latest version where the vulnerability has been resolved.
What systems are affected by CVE-2025-38441?
CVE-2025-38441 affects all versions of the Linux kernel that have not been patched.
What is the impact of CVE-2025-38441?
The impact of CVE-2025-38441 could lead to information leaks due to the use of uninitialized memory.
Who reported CVE-2025-38441?
CVE-2025-38441 was reported by syzbot, a tool that finds bugs in the Linux kernel.