Linux Kernel Vulnerability in Netfilter Component by The Linux Foundation

CVE-2025-39867

What is CVE-2025-39867?

A null dereference vulnerability has been identified in the Netfilter module of the Linux kernel, specifically within the nft_set_pipapo component. This issue occurs due to an improper check for a null scratch map, which could lead to unexpected behavior when avx2 support is not available. The vulnerability has been addressed by correcting the logic in the check, enhancing the robustness and security of the affected systems. It is crucial for administrators to ensure their Linux kernels are updated to mitigate potential risks associated with this flaw.

References