Netlink Memory Management Vulnerability in Linux Kernel

CVE-2025-38465

What is CVE-2025-38465?

A vulnerability in the Linux kernel's netlink functionality can lead to improper handling of socket memory allocations. When the socket's receive buffer size is set to an overly large value, it causes multiple wraparounds in the memory allocation counter, allowing a single socket to consume excessive kernel memory. This scenario may eventually result in an out-of-memory (OOM) condition, adversely affecting system stability and performance. The issue has been addressed by implementing checks that prevent the condition from being triggered.

References