Landlock Vulnerability in Linux Kernel Affects Multiple Versions

CVE-2025-38651

What is CVE-2025-38651?

A vulnerability in the Linux Kernel's landlock subsystem pertains to improper input validation within the get_id_range() function. This function requires a positive integer as its first argument, yet the get_random_u8() call can return 0, potentially leading to unintended behavior in the system. The issue was addressed by clamping the value returned by get_random_u8(), ensuring that the input adheres to the expected range. This vulnerability was validated through extensive testing, confirming the resolution of the issue.

References