Critical Vulnerability in Linux Kernel: CVE-2025-38285
Summary
CVE-2025-38285: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARN() in get_bpf_raw_tp_regs syzkaller reported an issue: WARNING: CPU: 3 PID: 5971 at kernel/trace/bpf_trace.c:1861 get_bpf_raw_tp_regs+0xa4/... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It is widely used across various platforms, including servers, desktops, and embedded systems. The kernel's stability and security are paramount, as vulnerabilities can lead to severe system compromises. CVE-2025-38285 highlights a specific issue within the kernel's BPF (Berkeley Packet Filter) subsystem, which is crucial for network packet filtering and monitoring.
Vulnerability Detail
CVE-2025-38285 is a vulnerability in the Linux kernel's BPF subsystem, specifically in the function get_bpf_raw_tp_regs. This issue was reported by syzkaller, which triggered a warning during execution. The vulnerability can lead to unexpected behavior in the kernel, potentially allowing for denial of service or other malicious exploits. The warning indicates a corner case where nested calls may occur, which could destabilize the system. The vulnerability affects multiple Debian versions, including Debian 11, 12, and 13, with a specific fix available in version 6.12.35-1.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, it is advisable to monitor system logs for any unusual warnings and to avoid using features that may trigger the vulnerable function until the system is updated.
Conclusion
CVE-2025-38285 is a critical vulnerability in the Linux kernel that requires immediate attention. Users are advised to update their systems to the patched version to mitigate potential risks. Regular monitoring and use of tools like Vulert can help maintain security in open-source software.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38285 is a vulnerability in the Linux kernel's BPF subsystem that can lead to system instability and potential exploits.
This vulnerability can cause unexpected behavior in the kernel, potentially leading to denial of service or other security risks.
Debian 11, 12, and 13 are affected by this vulnerability, with a specific fix available for Debian 13.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If immediate updates are not possible, monitor system logs for unusual warnings and avoid using features that may trigger the vulnerable function.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
