Unaffected Ethernet Header Vulnerability in Linux Kernel Netfilter Products

CVE-2025-38441

What is CVE-2025-38441?

A vulnerability in the Linux kernel's netfilter module allows for potential access to uninitialized values in the nf_flow_pppoe_proto function, which processes Ethernet headers incorrectly. This issue arises from a missing operation that fails to account for the Ethernet header in the flow table, leading to security risks. Exploitation may allow malicious actors to access uninitialized memory, potentially leading to information disclosure or other unintended behavior within the kernel networking stack.

References