CVE-2025-38403
BaseFortify
Publication date: 2025-07-25
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves the Linux kernel's vmci transport packet initialization. The issue was that the vmci_transport_packet structure was not properly cleared before being populated, which could leave uninitialized data in the structure. The fix was to use memset to clear the packet properly during initialization to avoid any uninitialized data remaining.
How can this vulnerability impact me? :
The presence of uninitialized data in the vmci transport packet could potentially lead to unpredictable behavior or security issues, such as information leakage or instability in the Linux kernel's vmci communication. However, specific impacts are not detailed in the provided information.