Vulnerability in Linux Kernel Affecting Simulation Work Context Initialization

CVE-2025-38408

What is CVE-2025-38408?

A vulnerability exists in the Linux kernel where the simulation work context's pointers are not initialized correctly. Instead of using kmalloc(), the kzalloc() method should be utilized to allocate the simulation work context. Failing to do so results in pointers that may hold random values, leading to the potential for invalid memory dereferencing and subsequent errors in system operations.

References