Answer in brief
CVE-2025-38574 records a High severity (CVSS 8.6) vulnerability in pptp: ensure minimal skb length in pptp_xmit(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 8.6. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <97b8c5d322c5c0038cac4bc56fdbe237d0be426f || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <26672f1679b143aa34fca0b6046b7fd0c184770d || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <5de7513f38f3c19c0610294ee478242bea356f8c || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <504cc4ab91073d2ac7404ad146139f86ecee7193 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <5005d24377378a20e5c0e53052fc4ebdcdcbc611 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <ea99b88b1999ebcb24d5d3a6b7910030f40d3bba || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <b7dcda76fd0615c0599c89f36873a6cd48e02dbb || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <1a04db0fd75cb6034fc27a56b67b3b8b9022a98c || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <de9c4861fb42f0cd72da844c3c34f692d5895b7b | 97b8c5d322c5c0038cac4bc56fdbe237d0be426f, 26672f1679b143aa34fca0b6046b7fd0c184770d, 5de7513f38f3c19c0610294ee478242bea356f8c, 504cc4ab91073d2ac7404ad146139f86ecee7193, 5005d24377378a20e5c0e53052fc4ebdcdcbc611, ea99b88b1999ebcb24d5d3a6b7910030f40d3bba, b7dcda76fd0615c0599c89f36873a6cd48e02dbb, 1a04db0fd75cb6034fc27a56b67b3b8b9022a98c, de9c4861fb42f0cd72da844c3c34f692d5895b7b |
| Linux/Linuxgeneric | 2.6.12 | Not reported |
Published upstream
Aug 19, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: pptp: ensure minimal skb length in pptp_xmit() Commit aabc6596ffb3 ("net: ppp: Add bound checking for skb data on ppp_sync_txmung") fixed ppp_sync_txmunge() We need a similar fix in pptp_xmit(), otherwise we might read uninit data as reported by syzbot. BUG: KMSAN: uninit-value in pptp_xmit+0xc34/0x2720 drivers/net/ppp/pptp.c:193 pptp_xmit+0xc34/0x2720 drivers/net/ppp/pptp.c:193 ppp_channel_bridge_input drivers/net/ppp/ppp_generic.c:2290 [inline] ppp_input+0x1d6/0xe60 drivers/net/ppp/ppp_generic.c:2314 pppoe_rcv_core+0x1e8/0x760 drivers/net/ppp/pppoe.c:379 sk_backlog_rcv+0x142/0x420 include/net/sock.h:1148 __release_sock+0x1d3/0x330 net/core/sock.c:3213 release_sock+0x6b/0x270 net/core/sock.c:3767 pppoe_sendmsg+0x15d/0xcb0 drivers/net/ppp/pppoe.c:904 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x330/0x3d0 net/socket.c:727 ____sys_sendmsg+0x893/0xd80 net/socket.c:2566 ___sys_sendmsg+0x271/0x3b0 net/socket.c:2620 __sys_sendmmsg+0x2d9/0x7c0 net/socket.c:2709
Quoted source text, attributed separately from HOL analysis.