Out-of-Bounds Access Vulnerability in Linux Kernel's BPF Local Storage
Summary
CVE-2025-38502: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can be crafted via tail calls. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for all other parts of the system. It manages hardware resources and enables communication between software and hardware. The kernel's BPF (Berkeley Packet Filter) functionality allows for efficient packet filtering and monitoring. However, a recent vulnerability has been identified in the BPF local storage mechanism, which can lead to security risks if exploited.
Vulnerability Detail
In the Linux kernel, an out-of-bounds access vulnerability has been discovered in the cgroup local storage feature of BPF. This issue arises when two BPF programs with different local storage sizes are used in a tail call sequence. The verifier checks each program individually, but during execution, the second program may access the first program's local storage, leading to potential out-of-bounds memory access. This can result in undefined behavior, crashes, or exploitation by malicious actors.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available.
Conclusion
The out-of-bounds access vulnerability in the Linux kernel's BPF local storage poses significant security risks. Users are advised to update their systems promptly to the patched versions to safeguard against potential exploitation. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability is an out-of-bounds access issue in the BPF local storage of the Linux kernel, which can lead to security risks.
The vulnerability affects Debian versions 11, 12, 13, and 14 of the Linux kernel.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Exploitation of this vulnerability can lead to undefined behavior, crashes, or unauthorized access to system memory.
Yes, a patch is available. Users should update their Linux kernel to the latest version to mitigate this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
