CVE-2025-38723

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the BPF subsystem related to jump offset calculation in tailcall functionality. An extra pass during BPF compilation can skip JIT context initialization, leading to an incorrect offset calculation. This results in a negative jump offset in the generated assembly code. A test case involving tailcall bpf2bpf 1 can reveal soft lock issues when the patch is not applied.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.