AZL-72920
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-72920.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-72920
- Upstream
- Published
- 2025-07-25T16:15:29Z
- Modified
- 2026-04-01T05:22:14.160761Z
- Summary
- CVE-2025-38441 affecting package kernel for versions less than 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
netfilter: flowtable: account for Ethernet header in nfflowpppoe_proto()
syzbot found a potential access to uninit-value in nfflowpppoe_proto()
Blamed commit forgot the Ethernet header.
BUG: KMSAN: uninit-value in nfflowoffloadinethook+0x7e4/0x940 net/netfilter/nfflowtableinet.c:27 nfflowoffloadinethook+0x7e4/0x940 net/netfilter/nfflowtableinet.c:27 nfhookentryhookfn include/linux/netfilter.h:157 [inline] nfhookslow+0xe1/0x3d0 net/netfilter/core.c:623 nfhookingress include/linux/netfilternetdev.h:34 [inline] nf_ingress net/core/dev.c:5742 [inline] __netifreceiveskb_core+0x4aff/0x70c0 net/core/dev.c:5837 __netifreceiveskbonecore net/core/dev.c:5975 [inline] __netifreceiveskb+0xcc/0xac0 net/core/dev.c:6090 netif_receiveskbinternal net/core/dev.c:6176 [inline] netifreceiveskb+0x57/0x630 net/core/dev.c:6235 tunrxbatched+0x1df/0x980 drivers/net/tun.c:1485 tungetuser+0x4ee0/0x6b40 drivers/net/tun.c:1938 tunchrwriteiter+0x3e9/0x5c0 drivers/net/tun.c:1984 newsyncwrite fs/readwrite.c:593 [inline] vfswrite+0xb4b/0x1580 fs/readwrite.c:686 ksyswrite fs/readwrite.c:738 [inline] _dosyswrite fs/readwrite.c:749 [inline]
- References