Kernel Panic in Linux Due to skb_linearize in Skb Operations by Linux Foundation

CVE-2025-38165

What is CVE-2025-38165?

A vulnerability in the Linux kernel's socket memory management has been identified that can lead to a kernel panic. Specifically, this issue is triggered when executing skb_linearize due to improper handling of socket buffer (skb) operations during heavy data aggregation under specific conditions. When the --rx-strp parameter is set to 100000, the data exceeds allowable limits, causing the panic assertion BUG_ON(skb_shared(skb)) to fail. The fix involves careful adjustment of skb_get operations to prevent this state from occurring, ensuring more stable networking functionality.

References