CVE-2025-38639: netfilter: xt_nfacct: don't assume acct name is null-terminated
In the Linux kernel, the following vulnerability has been resolved:
netfilter: xtnfacct: don't assume acct name is null-terminated
BUG: KASAN: slab-out-of-bounds in .. lib/vsprintf.c:721 Read of size 1 at addr ffff88801eac95c8 by task syz-executor183/5851 [..] string+0x231/0x2b0 lib/vsprintf.c:721 vsnprintf+0x739/0xf00 lib/vsprintf.c:2874 [..] nfacctmtcheckentry+0xd2/0xe0 net/netfilter/xtnfacct.c:41 xtcheckmatch+0x3d1/0xab0 net/netfilter/xtables.c:523
nfnlacctfindget() handles non-null input, but the error printk relied on its presence.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38639?
CVE-2025-38639 has a high severity due to its potential to cause a slab-out-of-bounds read in the Linux kernel.
How do I fix CVE-2025-38639?
To fix CVE-2025-38639, update your Linux kernel to the latest stable version that addresses this vulnerability.
What systems are affected by CVE-2025-38639?
CVE-2025-38639 affects the Linux kernel, particularly versions before the patch was applied.
What type of vulnerability is CVE-2025-38639?
CVE-2025-38639 is a memory corruption vulnerability related to improper handling of null-termination in the netfilter subsystem.
Is there a proof of concept for CVE-2025-38639?
Yes, there are reported instances where proof of concept exploits demonstrate the vulnerability's ability to cause out-of-bounds reads.