CVE-2025-38201

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, specifically in the netfilter component, where the maximum map bucket size was not properly clamped to INT MAX. This could lead to issues when resizing a hashtable, potentially triggering a WARN ON ONCE in kvmalloc node noprof() due to GFP NOWARN being unset. The fix is similar to a previous patch that clamped the maximum hashtable size to INT MAX in the conntrack module.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.