Linux Kernel Vulnerability in BPF Map Lookup Functionality

CVE-2025-38202

What is CVE-2025-38202?

A vulnerability exists in the Linux kernel's BPF (Berkeley Packet Filter) mechanism concerning the bpf_map_lookup_percpu_elem() function. This issue arises when the BPF JIT (Just-In-Time compilation) is disabled or is executed on a 32-bit host. Specifically, using this helper in sleepable BPF programs can trigger warnings due to insufficient checks for the rcu_read_lock_trace_held() condition. This can potentially lead to unexpected behavior or security concerns in systems employing this BPF functionality.

References