CVE-2025-38566

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A security issue was identified in the Linux kernel related to the handling of server-side TLS alerts within the sunrpc component. The tls alert recv() function incorrectly assumed it could read data from the message iterator's kvec. This occurs because the kTLS implementation splits TLS record payloads between a control message buffer and a payload buffer. The patch addresses this by reworking how control messages are set up and used by sock recvmsg(). Specifically, the kTLS layer now returns an error upon encountering a TLS control message, allowing NFS to set up a kvec-backed message buffer to read the control message, such as a TLS alert.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.