PT-2025-34412

CVE-2025-38651

·

Published

2025-06-15

·

Updated

2025-08-25

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.16.0-rc1-dev-00001-g314a2f98b65f and earlier
Description: A flaw was identified in the Linux kernel related to landlock functionality. Specifically, the get id range() function was susceptible to receiving a zero value as its first argument due to the behavior of get random u8(), while expecting a positive value. This issue was detected through KUnit tests, which triggered a warning. The problem was addressed by clamping the input value to ensure it remains positive.
Recommendations: Update to a newer version of the Linux kernel to address this issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾