Linux Kernel BPF Vulnerability in Network Filtering

CVE-2025-38640

What is CVE-2025-38640?

The Linux kernel has a vulnerability that affects the execution of BPF (Berkeley Packet Filter) programs within the netfilter framework. This issue arises when the netfilter BPF program is executed without the migration being properly disabled in the transmission path, leading to assertion failures in the processing of BPF programs. This flaw may potentially allow for unexpected behaviors or crashes, impacting network reliability and security.

References