CVE-2025-38622

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.16.0-rc7

Description: A flaw exists in the Linux kernel related to handling UDP packets with specific configurations. Specifically, when a packet with a virtio net hdr is sent to a tun device with SKB GSO UDP and a gso size less than the udphdr size, a kernel crash can occur within the skb pull rcsum function. This issue is triggered when the UDP encapsulation option UDP ENCAP ESPINUDP is enabled, leading to a segmentation fault during UDP receive processing. The vulnerability arises from segmentation introduced in the UDP receive path intended only for GRO (Generic Receive Offload), which was not designed for UFO (UDP Fragmentation Offload) packets.

Recommendations: Linux kernel versions prior to 6.16.0-rc7 should be updated.