Threats tagged 'ghsa-xq77-3x66-fcxc'

CVE-2025-38402 is a vulnerability in the Linux kernel's idpf driver where the function responsible for returning the RSS key size returns an invalid negative error code (-EOPNOTSUPP) cast as an unsigned 32-bit integer. This leads to an invalid size value and likely causes allocation failures when the RSS key is not supported on a device. The issue manifests during the execution of the 'ethtool -x eth0' command on devices lacking RSS capabilities. The kernel logs show a call trace indicating the failure path. The vulnerability has a medium severity with an impact on availability due to allocation failure.