CVE-2025-38061

net: pktgen: fix access outside of user given buffer in pktgen_thread_write()

State: Published
Severity: Not scored
Published: Jun 18, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: pktgen: fix access outside of user given buffer in pktgen_thread_write()

Honour the user given buffer size for the strn_len() calls (otherwise strn_len() will access memory outside of the user given buffer).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a3d89f1cfe1e6d4bb164db2595511fd33db21900Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5bfa81539e22af4c40ae5d43d7212253462383a6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 128cdb617a87767c29be43e4431129942fce41dfAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ef1158a6a650ecee72ab40851b1d52e04d3f9cb5Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c81c2ee1c3b050ed5c4e92876590cc7a259183f6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6b1d3e9db82d01a88de1795b879df67c2116b4f4Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8fef258b555c75a467a6b4b7e3a3cbc46d5f4102Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 425e64440ad0a2f03bdaf04be0ae53dededbaa77Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.4.294 through 5.4.Not affected 5.10.238 through 5.10.Not affected 5.15.185 through 5.15.Not affected 6.1.141 through 6.1.Not affected 6.6.93 through 6.6.Not affected 6.12.31 through 6.12.Not affected 6.14.9 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a3d89f1cfe1e6d4bb164db2595511fd33db21900Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5bfa81539e22af4c40ae5d43d7212253462383a6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 128cdb617a87767c29be43e4431129942fce41dfAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ef1158a6a650ecee72ab40851b1d52e04d3f9cb5Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c81c2ee1c3b050ed5c4e92876590cc7a259183f6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6b1d3e9db82d01a88de1795b879df67c2116b4f4Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8fef258b555c75a467a6b4b7e3a3cbc46d5f4102Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 425e64440ad0a2f03bdaf04be0ae53dededbaa77Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.4.294 through 5.4.*Not affected
5.10.238 through 5.10.*Not affected
5.15.185 through 5.15.*Not affected
6.1.141 through 6.1.*Not affected
6.6.93 through 6.6.*Not affected
6.12.31 through 6.12.*Not affected
6.14.9 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.