01 Record

CVE-2025-38320

arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 7.5% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-07-10 08:14Z1 YR AGO

Last updated

2026-05-11 21:25Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

393b4b0b0e4d7e0e9d97c9ccd6a5760ad6ae96e1349bc8950dff00d5764ffa47

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux0a8ea52c3eb157dd65e224fc95b7c9c99fcba9f7 to < 64773b3ea09235168a549a195cba43bb867c4a17, 0a8ea52c3eb157dd65e224fc95b7c9c99fcba9f7 to < 67abac27d806e8f9d4226ec1528540cf73af673a, 0a8ea52c3eb157dd65e224fc95b7c9c99fcba9f7 to < 92750bfe7b0d8dbcaf578c091a65eda1c5f9ad38, 0a8ea52c3eb157dd65e224fc95b7c9c99fcba9f7 to < 01f91d415a8375d85e0c7d3615cd4a168308bb7c, 0a8ea52c3eb157dd65e224fc95b7c9c99fcba9f7 to < 21da6d3561f373898349ca7167c9811c020da695, 0a8ea52c3eb157dd65e224fc95b7c9c99fcba9f7 to < 22f935bc86bdfbde04009f05eee191d220cd8c89, 0a8ea52c3eb157dd65e224fc95b7c9c99fcba9f7 to < 422e565b7889ebfd9c8705a3fc786642afe61fca, 0a8ea52c3eb157dd65e224fc95b7c9c99fcba9f7 to < 39dfc971e42d886e7df01371cd1bef505076d84c, 4.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/64773b3ea09235168a549a195cba43bb867c4a17
git.kernel.orghttps://git.kernel.org/stable/c/67abac27d806e8f9d4226ec1528540cf73af673a
git.kernel.orghttps://git.kernel.org/stable/c/92750bfe7b0d8dbcaf578c091a65eda1c5f9ad38
git.kernel.orghttps://git.kernel.org/stable/c/01f91d415a8375d85e0c7d3615cd4a168308bb7c
git.kernel.orghttps://git.kernel.org/stable/c/21da6d3561f373898349ca7167c9811c020da695
git.kernel.orghttps://git.kernel.org/stable/c/22f935bc86bdfbde04009f05eee191d220cd8c89
git.kernel.orghttps://git.kernel.org/stable/c/422e565b7889ebfd9c8705a3fc786642afe61fca
git.kernel.orghttps://git.kernel.org/stable/c/39dfc971e42d886e7df01371cd1bef505076d84c
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38320

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38320

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References