VDB
CVE-2025-38607
CVE-2025-38607
PUBLISHED
CVSS 5.5 MEDIUM
In the Linux kernel, the following vulnerability has been resolved: bpf: handle jset (if a & b ...) as a jump in CFG computation BPF_JSET is a conditional jump and currently verifier.c:can_jump() does not know about that. This can lead to incorrect live registers and SCC computation. E.g. in the following example: 1: r0 = 1; 2: r2 = 2; 3: if r1 & 0x7 goto +1; 4: exit; 5: r0 = r2; 6: exit; W/o this fix insn_successors(3) will return only (4), a jump to (5) would be missed and r2 won't be marked as alive at (3).
EPSS 0.02% · 5.1th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.02%
5.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| linux | linux_kernel | 6.15, 6.15, 6.15 |
| Linux | Linux | 14c8552db64476ffc27c13dc6652fc0dac31c0ba, 14c8552db64476ffc27c13dc6652fc0dac31c0ba, 6.15 |
Exploit Intelligence
- https://git.kernel.org/stable/c/65eb166b8636365ad3d6e36d50a7c5edfe6cc66e (circl)
- https://git.kernel.org/stable/c/261b30ad1516f4b9edd500aa6e8d6315c8fc109a (circl)
- https://git.kernel.org/stable/c/3157f7e2999616ac91f4d559a8566214f74000a5 (circl)
- CVE-2025-38578.yara (github-yara)
- CVE-2025-38578.yara (github-yara)
- CVE-2025-38578.yara (github-yara)
- CVE-2025-38578.yara (github-yara)
- CVE-2025-38578.yara (github-yara)
- TestCaseRule-CVE-2025-38555.yara (github-yara)
- TestCaseRule-CVE-2025-38555.yara (github-yara)
…and 3 more exploits
Timeline
- Jan 21, 1970 Security Advisory
- Aug 19, 2025 CVE Published
- Aug 20, 2025 EPSS Score
- Aug 20, 2025 Coalition ESS Score
- Aug 26, 2025 Coalition ESS Score
- Aug 28, 2025 EPSS Score
- Sep 5, 2025 EPSS Score
- Sep 13, 2025 EPSS Score
- Sep 21, 2025 EPSS Score
- Sep 29, 2025 EPSS Score
- Oct 4, 2025 Coalition ESS Score
- Oct 6, 2025 Coalition ESS Score