CVE-2025-38201

EUVD-2025-20055
In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX

Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof()
when resizing hashtable because __GFP_NOWARN is unset.

Similar to:

  b541ba7d1f5a ("netfilter: conntrack: clamp maximum hashtable size to INT_MAX")
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 8%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.6 ≤
𝑥
< 6.12.35
linuxlinux_kernel
6.13 ≤
𝑥
< 6.15.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.170-3
fixed
bookworm (security)
6.1.176-1
fixed
bullseye
vulnerable
bullseye (security)
5.10.259-1
fixed
forky
7.0.13-1
fixed
sid
7.1.3-1
fixed
trixie
6.12.86-1
fixed
trixie (security)
6.12.95-1
fixed
linux-6.1
bullseye (security)
6.1.176-1~deb11u1
fixed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
kernel-64kb
suse enterprise desktop 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.16.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.16.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.16.1
fixed
kernel-azure
suse enterprise sap 15 SP6
6.4.0-150600.8.52.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.20.15.2
fixed
suse enterprise server 15 SP6
6.4.0-150600.8.52.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.15.2
fixed
kernel-default
suse enterprise desktop 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.16.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.16.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.16.1
fixed
kernel-default-base
suse enterprise desktop 15 SP6
6.4.0-150600.23.70.1.150600.12.30.2
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.16.1.150700.17.11.2
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.70.1.150600.12.30.2
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.16.1.150700.17.11.2
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.70.1.150600.12.30.2
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.16.1.150700.17.11.2
fixed
kernel-obs-build
suse enterprise desktop 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.16.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.16.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.16.1
fixed
kernel-source
suse enterprise desktop 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.16.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.16.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.16.1
fixed
kernel-source-azure
suse enterprise sap 15 SP6
6.4.0-150600.8.52.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.20.15.2
fixed
suse enterprise server 15 SP6
6.4.0-150600.8.52.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.15.2
fixed
kernel-zfcpdump
suse enterprise desktop 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.16.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.16.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.70.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.16.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
bpftool
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
bpftool-debuginfo
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-debuginfo
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-debuginfo-common-aarch64
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-debuginfo-common-x86_64
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-devel
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-headers
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-libbpf
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-libbpf-debuginfo
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-libbpf-devel
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-libbpf-static
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-livepatch-6.1.153-175.280
Amazon Linux 2023
1:1.0-0.amzn2023
fixed
kernel-livepatch-6.12.35-55.103
Amazon Linux 2023
0:1.0-0.amzn2023
fixed
kernel-modules-extra
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-modules-extra-common
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-tools
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-tools-debuginfo
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel-tools-devel
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
kernel6.12
Amazon Linux 2023
0:6.12.35-55.103.amzn2023
fixed
kernel6.12-debuginfo
Amazon Linux 2023
0:6.12.35-55.103.amzn2023
fixed
kernel6.12-debuginfo-common-aarch64
Amazon Linux 2023
0:6.12.35-55.103.amzn2023
fixed
kernel6.12-debuginfo-common-x86_64
Amazon Linux 2023
0:6.12.35-55.103.amzn2023
fixed
kernel6.12-modules-extra
Amazon Linux 2023
0:6.12.35-55.103.amzn2023
fixed
perf
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
perf-debuginfo
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
perf6.12
Amazon Linux 2023
0:6.12.35-55.103.amzn2023
fixed
perf6.12-debuginfo
Amazon Linux 2023
0:6.12.35-55.103.amzn2023
fixed
python3-perf
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
python3-perf-debuginfo
Amazon Linux 2023
1:6.1.153-175.280.amzn2023
fixed
python3-perf6.12
Amazon Linux 2023
0:6.12.35-55.103.amzn2023
fixed
python3-perf6.12-debuginfo
Amazon Linux 2023
0:6.12.35-55.103.amzn2023
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
kernel
Azure Linux 3.0
0:6.6.126.1-1.azl3
fixed
References
https://git.kernel.org/stable/c/0ab3de047808f375a36cd345225572eb3366f3c6
https://git.kernel.org/stable/c/1fe27f97944017a9d3c5af4d6d95282bff0f1147
https://git.kernel.org/stable/c/4abccfb61f422300be014b8e734c63344306f009
https://git.kernel.org/stable/c/80417057ac60dd80f4816eb426e4e4a5bf696534
https://git.kernel.org/stable/c/b85e3367a5716ed3662a4fe266525190d2af76df
https://git.kernel.org/stable/c/d2768016f091f8a5264076b433fd7c3fabb6eb97
https://git.kernel.org/stable/c/df524a68d9021c1401965d610bb6e42ee5d9611e