CVE-2025-38591

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a vulnerability in the BPF (Berkeley Packet Filter) subsystem. A crafted BPF program can cause a kernel warning due to improper handling of narrower access to pointer context fields. Specifically, the verifier may allow access that should be considered invalid, leading to a kernel warning during context access conversion. This issue affects multiple fields in context structures that allow narrow access.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.