CVE-2025-38639

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The netfilter module’s xt nfacct component does not properly handle non-null terminated accounting names, leading to a potential out-of-bounds read in the vsprintf function when processing accounting entries. This issue is triggered by the nfacct mt checkentry function and can occur during network packet processing.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.