CVE-2025-38614: eventpoll: Fix semi-unbounded recursion
Published Aug 19, 2025
·Updated
eventpoll: Fix semi-unbounded recursion
Affected Software
20 affected componentsFixes available
Linux Kernel
Microsoft azl3 kernel 6.6.96.2-1
Microsoft azl3 kernel 6.6.96.2-2
Microsoft cbl2 kernel 5.15.186.1-1
Linux Linux kernel>=2.6.32.30<2.6.33
Linux Linux kernel>=2.6.33.8<2.6.34
Linux Linux kernel>=2.6.34.10<2.6.35
Linux Linux kernel>=2.6.35.12<2.6.36
Linux Linux kernel>=2.6.37.3<2.6.38
Linux Linux kernel>=2.6.38.1<5.15.190
Linux Linux kernel>=5.16<6.1.149
Linux Linux kernel>=6.2<6.6.103
Linux Linux kernel>=6.7<6.12.43
Linux Linux kernel>=6.13<6.15.11
Linux Linux kernel>=6.16<6.16.1
Linux Linux kernel=2.6.38
Linux Linux kernel=2.6.38-rc7
Linux Linux kernel=2.6.38-rc8
Debian Debian Linux=11.0
debian/linux
6.1.176-16.1.190-16.12.107-16.12.113-17.2.12-17.2.13-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Aug 19, 2025
CVE Published
via MITRE·05:03 PM
Data Sourced
via MITRE·05:03 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via Red Hat·06:03 PM
DescriptionSeverityAffected Software
Sep 4, 2025
Data Sourced
via Microsoft·04:39 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-38614?
CVE-2025-38614 is classified as a medium-severity vulnerability in the Linux kernel.
2
How do I fix CVE-2025-38614?
To remediate CVE-2025-38614, update your Linux kernel to the latest version where the vulnerability has been patched.
3
What systems are affected by CVE-2025-38614?
CVE-2025-38614 affects all versions of the Linux kernel that do not include the fix for the eventpoll recursion issue.
4
What is the nature of the vulnerability in CVE-2025-38614?
CVE-2025-38614 involves a semi-unbounded recursion issue in the Linux kernel's eventpoll implementation.
5
Is CVE-2025-38614 being actively exploited?
As of the latest data, there are no known active exploits specifically targeting CVE-2025-38614.