CVE-2025-38060

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the bpf verifier, where the copy verifier state() function should copy the loop entry field. If not copied, loop entry values from unrelated states could affect the env->cur state. Additionally, env->stack should not contain states with loop entry not equal to NULL. The fix has a verification performance impact for selftests, with significant negative impact for sched ext.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.