CVE-2025-38640

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.16.0-rc6-syzkaller-00002-g155a3c003e55

Description: The Linux kernel contained a flaw in the netfilter bpf (Berkeley Packet Filter) functionality. Specifically, the nf hook run bpf() function did not disable migration, leading to a potential assertion failure in bpf prog run() when a netfilter bpf program was called in the xmit path. This could result in a system crash.

Recommendations: Update to Linux kernel version 6.16.0-rc6-syzkaller-00002-g155a3c003e55 or a later version to address this issue.