CVE-2025-38201
EUVD-2025-2005504.07.2025, 14:15
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
Otherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof()
when resizing hashtable because __GFP_NOWARN is unset.
Similar to:
b541ba7d1f5a ("netfilter: conntrack: clamp maximum hashtable size to INT_MAX")EnginsightAffected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 5.6 ≤ 𝑥 < 6.12.35 |
| linux | linux_kernel | 6.13 ≤ 𝑥 < 6.15.4 |
𝑥
= Vulnerable software versions
Debian Releases
References