Search: CVE-2025-38350

CVE-2025-38350 is a high-severity vulnerability in the Linux kernel's network traffic control subsystem that can lead to privilege escalation on Container-Optimized OS nodes. It affects certain versions of Red Hat Enterprise Linux 8 Real Time kernels and Ubuntu Linux kernels, including those used in Google Kubernetes Engine (GKE) Standard clusters. GKE Autopilot clusters are not impacted by default but may be vulnerable if configured with certain profiles. The vulnerability has been addressed by patches released by Red Hat and Ubuntu, requiring system updates and reboots. Users should upgrade to the specified fixed kernel versions to mitigate the issue.