Denial of Service Vulnerability in Linux Kernel Affects Multiple Devices

CVE-2025-38402

What is CVE-2025-38402?

A vulnerability in the Linux kernel arises from improper handling of Return Size Specification (RSS) keys. Devices lacking support for RSS capabilities may encounter issues when the command 'ethtool -x eth0' is executed, potentially causing failures in memory allocation. This occurs due to the function returning an unsupported error size, leading to inefficiencies and instability across the affected systems.

References