CVE-2025-38200 — Integer Underflow (Wrap or Wraparound) in Linux
CWE-191 — Integer Underflow (Wrap or Wraparound)CWE-476 — NULL Pointer Dereference68 documents8 sources
Severity
5.5MEDIUMNVD
OSV5.6OSV3.2
EPSS
0.0%
top 93.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 4
Latest updateMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
i40e: fix MMIO write access to an invalid page in i40e_clear_hw
When the device sends a specific input, an integer underflow can occur, leading
to MMIO write access to an invalid page.
Prevent the integer underflow by changing the type of related variables.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages4 packages
▶CVEListV5linux/linux1bff652941c4d94f97610c9a30473aad6f5b2fff — 872607632c658d3739e4e7889e4f3c419ae2c193+8
Also affects: Debian Linux 11.0