CVE-2025-38173

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue concerns handling zero-length skcipher requests in the Linux kernel's crypto module, specifically the marvell/cesa component. The problem arises when the kernel attempts to access random memory for requests of zero length, which can lead to unpredictable behavior. The resolution involves simply returning 0 for such requests, preventing unnecessary memory access.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.