CVE-2025-38528: bpf: Reject %p% format string in bprintf-like helpers
bpf: Reject %p% format string in bprintf-like helpers
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Apply the kernel fix that makes BPF bprintf-like helpers reject the '%p%' format string (rather than skipping over the second '%' / punctuation while preparing the format). This prevents the warning in lib/vsprintf.c:2680 (format_decode) caused by processing '%p%' in bpf_trace_printk-like helpers.
Linux kernel (BPF bprintf-like helpers) Reject %p% format strings in bprintf-like helpers (e.g., bpf_trace_printk) = Reject
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38528?
CVE-2025-38528 is classified as a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-38528?
To mitigate CVE-2025-38528, update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What impact does CVE-2025-38528 have on systems?
CVE-2025-38528 can cause kernel warnings at runtime due to the improper handling of format strings in BPF programs.
Which versions of the Linux kernel are affected by CVE-2025-38528?
CVE-2025-38528 affects specific versions of the Linux kernel; consult the release notes for your distribution to determine if your version is vulnerable.
What components are involved in CVE-2025-38528?
CVE-2025-38528 involves the BPF (Berkeley Packet Filter) subsystem within the Linux kernel.