01 Record

CVE-2025-38061

net: pktgen: fix access outside of user given buffer in pktgen_thread_write()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net: pktgen: fix access outside of user given buffer in pktgen_thread_write()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 6.8% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-06-18 09:33Z1 YR AGO
Last updated: 2026-05-11 21:20Z3 MO AGO
Reserved: 2025-04-16
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: c3027944e8d71ed15df1343372d6486b3fe40e73861c76c0c60b3f35164ce59b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a3d89f1cfe1e6d4bb164db2595511fd33db21900, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 5bfa81539e22af4c40ae5d43d7212253462383a6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 128cdb617a87767c29be43e4431129942fce41df, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ef1158a6a650ecee72ab40851b1d52e04d3f9cb5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < c81c2ee1c3b050ed5c4e92876590cc7a259183f6, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 6b1d3e9db82d01a88de1795b879df67c2116b4f4, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8fef258b555c75a467a6b4b7e3a3cbc46d5f4102, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 425e64440ad0a2f03bdaf04be0ae53dededbaa77, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a3d89f1cfe1e6d4bb164db2595511fd33db21900
git.kernel.orghttps://git.kernel.org/stable/c/5bfa81539e22af4c40ae5d43d7212253462383a6
git.kernel.orghttps://git.kernel.org/stable/c/128cdb617a87767c29be43e4431129942fce41df
git.kernel.orghttps://git.kernel.org/stable/c/ef1158a6a650ecee72ab40851b1d52e04d3f9cb5
git.kernel.orghttps://git.kernel.org/stable/c/c81c2ee1c3b050ed5c4e92876590cc7a259183f6
git.kernel.orghttps://git.kernel.org/stable/c/6b1d3e9db82d01a88de1795b879df67c2116b4f4
git.kernel.orghttps://git.kernel.org/stable/c/8fef258b555c75a467a6b4b7e3a3cbc46d5f4102
git.kernel.orghttps://git.kernel.org/stable/c/425e64440ad0a2f03bdaf04be0ae53dededbaa77
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38061

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38061

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References