THREAT OPS › Threat News › [NVD] CVE-2025-38591 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject narrower access to pointer ctx fields
The following BPF program, simplified from a syzkaller repro, causes a
kernel warning:
r0 = *(u8 *)(r1 + 169);
exit;
With pointer field sk being at of
[NVD] CVE-2025-38591 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: bpf: Reject narrower access to pointer ctx fields The following BPF program, simplified from a syzkaller repro, causes a kernel warning: r0 = *(u8 *)(r1 + 169); exit; With pointer field sk being at of
CVE-2025-38591 CVSS: 5.5 MEDIUM Published: 2025-08-19T17:15:36.790
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject narrower access to pointer ctx fields
The following BPF program, simplified from a syzkaller repro, causes a kernel warning:
r0 = *(u8 *)(r1 + 169); exit;
With pointer field sk being at offset 168 in __sk_buff. This access is detected as a
Indicators of compromise
- CVE-2025-38591cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-38591