Buffer Access Vulnerability in Linux Kernel's Packet Generator

CVE-2025-38061

What is CVE-2025-38061?

A vulnerability in the Linux Kernel's packet generator (pktgen) allows for potential access violations outside of a user-defined buffer. This occurs due to improper handling of buffer sizes in strn_len() calls, leading to memory access beyond allocated limits. The flaw could undermine system integrity by allowing unauthorized memory access, emphasizing the critical need for timely updates to the kernel to avoid exploitation.

References