Linux Kernel Netfilter Vulnerability Affecting All Versions

CVE-2025-38201

What is CVE-2025-38201?

A memory management vulnerability in the Linux kernel's netfilter component has been resolved to prevent potential issues when resizing hashtables. The flaw allows for a scenario where the maximum bucket size could exceed safe limits, leading to potential instability during runtime operations. Specifically, this occurs due to the lack of proper constraints on the bucket size, resulting in warnings when memory allocation misbehaves. The fix clamps the maximum map bucket size to INT_MAX, ensuring safer memory allocation practices and promoting system reliability.

References