Threats tagged 'ghsa-r4mq-hvhp-3h35'

CVE-2025-38089 is a medium severity vulnerability in the Linux kernel's sunrpc server code. It involves improper handling of the SVC_GARBAGE return value during RPC authentication processing, which can lead to a kernel crash or memory corruption. The flaw arises when a specially crafted RPC packet causes the server to dereference a null pointer or corrupt memory. The issue is addressed by treating SVC_GARBAGE as an authentication error (AUTH_BADCRED) rather than sending a GARBAGE_ARGS reply, preventing the crash.