Slab Out-of-Bounds Vulnerability in Linux Kernel Affecting Netfilter

CVE-2025-38639

What is CVE-2025-38639?

A vulnerability has been identified in the Linux kernel related to the netfilter component, particularly in the xt_nfacct function. The flaw occurs due to incorrect handling of non-null input, leading to a slab out-of-bounds scenario. A specific input may provoke a read of unintended memory space, potentially resulting in erratic behavior or crashes. This oversight affects the error logging mechanism, which incorrectly assumes that account names are null-terminated, thus compromising the integrity of network filtering operations.

References