Out-of-Bounds Write Vulnerability in Linux Kernel BPF Crypto Function

CVE-2025-39917

What is CVE-2025-39917?

A vulnerability in the Linux kernel's BPF crypto functionality can lead to out-of-bounds (OOB) writes due to improper size validation of destination dynamic pointers before engaging with the crypto backend. Specifically, in the bpf_crypto_crypt() function, there is a risk when the destination buffer is smaller than the source buffer, potentially allowing malicious exploitation under root privileges. This issue underscores the importance of proper buffer handling to maintain system security and integrity.

References