CVE-2025-38408

genirq/irq_sim: Initialize work context pointers properly

State: Published
Severity: 7.8 High
Published: Jul 25, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

genirq/irq_sim: Initialize work context pointers properly

Initialize `ops` member's pointers properly by using kzalloc() instead of kmalloc() when allocating the simulation work context. Otherwise the pointers contain random content leading to invalid dereferencing.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 186df821de0f34490ed5fc0861243748b2483861Affected 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before c71aa4bb528ae6f8fd7577a0a39e5a03c60b04fbAffected 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before ec3656a8cb428d763def32bc2fa695f94be23629Affected 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 19bd7597858dd15802c1d99fcc38e528f469080aAffected 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 7f73d1def72532bac4d55ea8838f457a6bed955cAffected 337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 8a2277a3c9e4cc5398f80821afe7ecbe9bdf2819Affected
LinuxLinux	5.8Affected before 5.8Not affected 5.15.199 through 5.15.Not affected 6.1.162 through 6.1.Not affected 6.6.120 through 6.6.Not affected 6.12.37 through 6.12.Not affected 6.15.6 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 186df821de0f34490ed5fc0861243748b2483861Affected
337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before c71aa4bb528ae6f8fd7577a0a39e5a03c60b04fbAffected
337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before ec3656a8cb428d763def32bc2fa695f94be23629Affected
337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 19bd7597858dd15802c1d99fcc38e528f469080aAffected
337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 7f73d1def72532bac4d55ea8838f457a6bed955cAffected
337cbeb2c13eb4cab84f576fd402d7ae4ed31ae1 to before 8a2277a3c9e4cc5398f80821afe7ecbe9bdf2819Affected

LinuxLinux

5.8Affected
before 5.8Not affected
5.15.199 through 5.15.*Not affected
6.1.162 through 6.1.*Not affected
6.6.120 through 6.6.*Not affected
6.12.37 through 6.12.*Not affected
6.15.6 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.