Search: CVE-2025-38166

A vulnerability in the Linux kernel's BPF subsystem related to ktls panic with sockmap has been fixed. The issue involves incorrect rollback logic when the BPF program sets cork_bytes and the scatter-gather list size increases, causing kernel panic due to msg_iter exceeding its actual size. This flaw could lead to system crashes and potentially compromise system stability. The vulnerability affects specific Linux kernel versions and has a CVSS score of 7.8, indicating a high severity impact on confidentiality, integrity, and availability. A patch is available and has been released by the vendor.