Critical Vulnerability in Linux Kernel: SVC_GARBAGE Handling Error
Summary
DEBIAN-CVE-2025-38089: In the Linux kernel, the following vulnerability has been resolved: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error tianshuo han reported a remotely-triggerable crash if the client sends a kernel RPC... Affects linux versions < 6.12.35-1. Fixed in 6.12.35-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware, system resources, and providing essential services to applications. It is widely used across various platforms, including servers, desktops, and embedded systems. The kernel's functionality includes process management, memory management, device management, and system calls. This vulnerability specifically affects the sunrpc subsystem, which handles remote procedure calls, making it susceptible to remote attacks that could lead to system crashes or memory corruption.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the sunrpc subsystem where the handling of SVC_GARBAGE during authentication processing can lead to a remotely-triggerable crash. When a specially crafted packet is sent to a kernel RPC server, if the decoding of the RPC reply fails and SVC_GARBAGE is returned without setting the rq_accept_statp pointer, it can be dereferenced, potentially leading to a kernel crash or memory corruption. This issue arises from improper handling of authentication failures, which should return an AUTH_ERR status instead of GARBAGE_ARGS, thus sidestepping the risk of dereferencing a NULL pointer.
How To Fix
Minimum fixed version
6.12.35-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the RPC server or implement firewall rules to block potentially malicious packets until the patch is applied. Additionally, monitoring logs for unusual RPC requests may help mitigate immediate risks.
Conclusion
The identified vulnerability in the Linux kernel's sunrpc subsystem poses significant risks, including system crashes and memory corruption. It is crucial for users and administrators to update to the patched version 6.12.35-1 or later to mitigate these risks. Utilizing tools like Vulert can aid in monitoring for such vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability allows remote attackers to crash the kernel or corrupt memory by sending specially crafted packets to the RPC server.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
Failure to address this vulnerability could lead to system instability, crashes, and potential exploitation by attackers, compromising system integrity.
Yes, versions prior to 6.12.35-1 are vulnerable to this issue. It is recommended to upgrade to the latest version.
System administrators should prioritize updating the Linux kernel to the patched version and consider implementing additional security measures to protect against potential exploitation.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
