Kernel Panic Vulnerability in Linux Package: CVE-2025-38165
Summary
CVE-2025-38165: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skb_linearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingre... Affects linux versions < 6.1.147-1. Fixed in 6.1.147-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential services such as process management, memory management, and device control. The kernel is critical for system stability and performance. This vulnerability affects the Linux kernel in Debian versions 12 and 13, specifically related to the sockmap functionality, which is used for efficient socket handling.
Vulnerability Detail
CVE-2025-38165 is a vulnerability in the Linux kernel that can lead to a kernel panic when executing specific commands involving the sockmap feature. The panic is triggered by an assertion failure in the skb_linearize function, which occurs due to a race condition introduced by a previous commit. When the RX path uses the strparser module with a large payload, it exceeds the maximum message fragments, leading to the panic. This vulnerability can cause system instability and crashes, affecting the overall reliability of the operating system.
How To Fix
Minimum fixed version
6.1.147-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the command that triggers the panic. Specifically, refrain from executing './bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000' until the package is updated.
Conclusion
CVE-2025-38165 is a significant vulnerability in the Linux kernel that can lead to kernel panics and system instability. It is crucial for users to update their systems to the latest patched version to mitigate this risk. Additionally, temporary workarounds can help avoid triggering the panic until the update is applied.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38165 is a vulnerability in the Linux kernel that can cause a kernel panic when certain commands are executed.
This vulnerability can lead to system crashes and instability, affecting the reliability of your operating system.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
As a temporary measure, avoid executing the command that triggers the panic until you can apply the update.
More details about CVE-2025-38165 can be found in the official Linux kernel documentation and security advisories.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
