PT-2025-34412
CVE-2025-38651
·
Published
2025-06-15
·
Updated
2025-08-25
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions 6.16.0-rc1-dev-00001-g314a2f98b65f and earlier
Description:
A flaw was identified in the Linux kernel related to landlock functionality. Specifically, the
get id range() function was susceptible to receiving a zero value as its first argument due to the behavior of get random u8(), while expecting a positive value. This issue was detected through KUnit tests, which triggered a warning. The problem was addressed by clamping the input value to ensure it remains positive.Recommendations:
Update to a newer version of the Linux kernel to address this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾