Critical Stack-Out-of-Bounds Read Vulnerability in Linux Kernel Affecting Debian Packages
Summary
CVE-2025-38320: In the Linux kernel, the following vulnerability has been resolved: arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() KASAN reports a stack-out-of-bounds read in regs_get_kernel_stack_nth(). Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used across various distributions, including Debian 11, 12, and 13. This vulnerability specifically affects the ptrace functionality, which allows a process to observe and control the execution of another process. The vulnerability arises from improper handling of stack memory, leading to potential security risks.
Vulnerability Detail
In the Linux kernel, a stack-out-of-bounds read vulnerability has been identified in the function regs_get_kernel_stack_nth(). This issue can lead to unauthorized access to memory, potentially allowing an attacker to read sensitive information from the stack. The vulnerability is triggered when the kernel attempts to access memory outside the allocated stack space, which can result in crashes or exploitation. The issue has been reported with KASAN (Kernel Address Sanitizer) indicating a bad memory access, and it has been confirmed that the problematic behavior is related to certain GCC compiler versions.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using the ptrace functionality until the kernel is updated. However, this may limit certain debugging and monitoring capabilities.
Conclusion
The stack-out-of-bounds read vulnerability in the Linux kernel poses significant security risks, particularly in Debian distributions. Users are urged to update their systems promptly to mitigate potential exploitation. Utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to unauthorized memory access, potentially exposing sensitive data and allowing for exploitation.
You can use Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without requiring any signup.
Debian 11, 12, and 13 are affected by this vulnerability, with specific patches available for Debian 13.
ptrace is a system call that allows one process to observe and control the execution of another process, which is crucial for debugging and monitoring applications.
Yes, the permanent fix is to update the Linux kernel to the patched version 6.12.35-1 for Debian 13 and apply relevant updates for Debian 11 and 12.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
