CVE-2025-38502

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: An out-of-bounds access issue exists in cgroup local storage within the Linux kernel. This can be triggered via tail calls between two BPF programs utilizing cgroup local storage with differing value sizes. The verifier may not detect the issue during program validation, but a runtime context error can occur where bpf get local storage() retrieves the incorrect map, leading to unintended memory access.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.