Answer in brief
CVE-2025-38441 records a Medium severity (CVSS 5.5) vulnerability in netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.9:-:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.9:rc7:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d06977b9a4109f8738bb276125eb6a0b772bc433 <a3aea97d55964e70a1e6426aa4cafdc036e8a2dd || >=8bf7c76a2a207ca2b4cfda0a279192adf27678d7 <eed8960b289327235185b7c32649c3470a3e969b || >=a2471d271042ea18e8a6babc132a8716bb2f08b9 <9fbc49429a23b02595ba82536c5ea425fdabb221 || >=87b3593bed1868b2d9fe096c01bcdf0ea86cbebf <e0dd2e9729660f3f4fcb16e0aef87342911528ef || >=87b3593bed1868b2d9fe096c01bcdf0ea86cbebf <cfbf0665969af2c69d10c377d4c3d306e717efb4 || >=87b3593bed1868b2d9fe096c01bcdf0ea86cbebf <18cdb3d982da8976b28d57691eb256ec5688fad2 || cf366ee3bc1b7d1c76a882640ba3b3f8f1039163 || >=5.15.157 <5.15.189 || >=6.1.88 <6.1.146 || >=6.6.29 <6.6.99 || >=6.8.8 <6.9 | a3aea97d55964e70a1e6426aa4cafdc036e8a2dd, eed8960b289327235185b7c32649c3470a3e969b, 9fbc49429a23b02595ba82536c5ea425fdabb221, e0dd2e9729660f3f4fcb16e0aef87342911528ef, cfbf0665969af2c69d10c377d4c3d306e717efb4, 18cdb3d982da8976b28d57691eb256ec5688fad2, 5.15.189, 6.1.146, 6.6.99, 6.9 |
| Linux/Linuxgeneric | 6.9 | Not reported |
Published upstream
Jul 25, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 5, 2026
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() syzbot found a potential access to uninit-value in nf_flow_pppoe_proto() Blamed commit forgot the Ethernet header. BUG: KMSAN: uninit-value in nf_flow_offload_inet_hook+0x7e4/0x940 net/netfilter/nf_flow_table_inet.c:27 nf_flow_offload_inet_hook+0x7e4/0x940 net/netfilter/nf_flow_table_inet.c:27 nf_hook_entry_hookfn include/linux/netfilter.h:157 [inline] nf_hook_slow+0xe1/0x3d0 net/netfilter/core.c:623 nf_hook_ingress include/linux/netfilter_netdev.h:34 [inline] nf_ingress net/core/dev.c:5742 [inline] __netif_receive_skb_core+0x4aff/0x70c0 net/core/dev.c:5837 __netif_receive_skb_one_core net/core/dev.c:5975 [inline] __netif_receive_skb+0xcc/0xac0 net/core/dev.c:6090 netif_receive_skb_internal net/core/dev.c:6176 [inline] netif_receive_skb+0x57/0x630 net/core/dev.c:6235 tun_rx_batched+0x1df/0x980 drivers/net/tun.c:1485 tun_get_user+0x4ee0/0x6b40 drivers/net/tun.c:1938 tun_chr_write_iter+0x3e9/0x5c0 drivers/net/tun.c:1984 new_sync_write fs/read_write.c:593 [inline] vfs_write+0xb4b/0x1580 fs/read_write.c:686 ksys_write fs/read_write.c:738 [inline] __do_sys_write fs/read_write.c:749 [inline]
Quoted source text, attributed separately from HOL analysis.