CVE-2025-38639
published 2025-08-22CVE-2025-38639: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nfacct: don't assume acct name is null-terminated BUG: KASAN…
medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
In the Linux kernel, the following vulnerability has been resolved:
netfilter: xt_nfacct: don't assume acct name is null-terminated
BUG: KASAN: slab-out-of-bounds in .. lib/vsprintf.c:721
Read of size 1 at addr ffff88801eac95c8 by task syz-executor183/5851
[..]
string+0x231/0x2b0 lib/vsprintf.c:721
vsnprintf+0x739/0xf00 lib/vsprintf.c:2874
[..]
nfacct_mt_checkentry+0xd2/0xe0 net/netfilter/xt_nfacct.c:41
xt_check_match+0x3d1/0xab0 net/netfilter/x_tables.c:523
nfnl_acct_find_get() handles non-null input, but the error
printk relied on its presence.
Affected
39 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 6.1.148-1 (bookworm) | linux 6.1.148-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.148-1 (bookworm) | linux 6.1.148-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 < 66d41268ede1e1b6e71ba28be923397ff0b2b9c3 | 66d41268ede1e1b6e71ba28be923397ff0b2b9c3 |
| linux | linux | >= ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 < e021a1eee196887536a6630c5492c23a4c78d452 | e021a1eee196887536a6630c5492c23a4c78d452 |
| linux | linux | >= ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 < b10cfa2de13d28ddd03210eb234422b7ec92725a | b10cfa2de13d28ddd03210eb234422b7ec92725a |
| linux | linux | >= ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 < e18939176e657a3a20bfbed357b8c55a9f82aba3 | e18939176e657a3a20bfbed357b8c55a9f82aba3 |
| linux | linux | >= ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 < 58004aa21e79addaf41667bfe65e93ec51653f18 | 58004aa21e79addaf41667bfe65e93ec51653f18 |
| linux | linux | >= ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 < 7c1ae471da69c09242834e956218ea6a42dd405a | 7c1ae471da69c09242834e956218ea6a42dd405a |
| linux | linux | >= ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 < 58007fc7b94fb2702000045ff401eb7f5bde7828 | 58007fc7b94fb2702000045ff401eb7f5bde7828 |
| linux | linux | >= ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 < df13c9c6ce1d55c31d1bd49db65a7fbbd86aab13 | df13c9c6ce1d55c31d1bd49db65a7fbbd86aab13 |
| linux | linux | >= ceb98d03eac5704820f2ac1f370c9ff385e3a9f5 < bf58e667af7d96c8eb9411f926a0a0955f41ce21 | bf58e667af7d96c8eb9411f926a0a0955f41ce21 |
| linux | linux_kernel | >= 0 < 5.10.244-1 | 5.10.244-1 |
| linux | linux_kernel | >= 0 < 6.1.148-1 | 6.1.148-1 |
| linux | linux_kernel | >= 0 < 6.12.43-1 | 6.12.43-1 |
| linux | linux_kernel | >= 0 < 6.16.3-1 | 6.16.3-1 |
| linux | linux_kernel | >= 0 < 5.15.0-163.173 | 5.15.0-163.173 |
| linux | linux_kernel | >= 0 < 6.8.0-100.100 | 6.8.0-100.100 |
| linux | linux_kernel | >= 3.3 < 5.4.297 | 5.4.297 |
| linux | linux_kernel | >= 5.11 < 5.15.190 | 5.15.190 |
| linux | linux_kernel | >= 5.16 < 6.1.148 | 6.1.148 |
| linux | linux_kernel | >= 5.5 < 5.10.241 | 5.10.241 |
| linux | linux_kernel | >= 6.13 < 6.15.10 | 6.15.10 |
| linux | linux_kernel | >= 6.16 < 6.16.1 | 6.16.1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM