[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-38124":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":116,"related":117,"reserved_at":9,"published_at":135,"modified_at":136,"state":137,"summary":138,"references_raw":147,"kevs":179,"epss":180,"epss_history":183,"metrics":456,"affected":462},"CVE-2025-38124","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix udp gso skb_segment after pull from frag_list\n\nCommit a1e40ac5b5e9 (\"net: gso: fix udp gso fraglist segmentation after\npull from frag_list\") detected invalid geometry in frag_list skbs and\nredirects them from skb_segment_list to more robust skb_segment. But some\npackets with modified geometry can also hit bugs in that code. We don't\nknow how many such cases exist. Addressing each one by one also requires\ntouching the complex skb_segment code, which risks introducing bugs for\nother types of skbs. Instead, linearize all these packets that fail the\nbasic invariants on gso fraglist skbs. That is more robust.\n\nIf only part of the fraglist payload is pulled into head_skb, it will\nalways cause exception when splitting skbs by skb_segment. For detailed\ncall stack information, see below.\n\nValid SKB_GSO_FRAGLIST skbs\n- consist of two or more segments\n- the head_skb holds the protocol headers plus first gso_size\n- one or more frag_list skbs hold exactly one segment\n- all but the last must be gso_size\n\nOptional datapath hooks such as NAT and BPF (bpf_skb_pull_data) can\nmodify fraglist skbs, breaking these invariants.\n\nIn extreme cases they pull one part of data into skb linear. For UDP,\nthis  causes three payloads with lengths of (11,11,10) bytes were\npulled tail to become (12,10,10) bytes.\n\nThe skbs no longer meets the above SKB_GSO_FRAGLIST conditions because\npayload was pulled into head_skb, it needs to be linearized before pass\nto regular skb_segment.\n\n    skb_segment+0xcd0/0xd14\n    __udp_gso_segment+0x334/0x5f4\n    udp4_ufo_fragment+0x118/0x15c\n    inet_gso_segment+0x164/0x338\n    skb_mac_gso_segment+0xc4/0x13c\n    __skb_gso_segment+0xc4/0x124\n    validate_xmit_skb+0x9c/0x2c0\n    validate_xmit_skb_list+0x4c/0x80\n    sch_direct_xmit+0x70/0x404\n    __dev_queue_xmit+0x64c/0xe5c\n    neigh_resolve_output+0x178/0x1c4\n    ip_finish_output2+0x37c/0x47c\n    __ip_finish_output+0x194/0x240\n    ip_finish_output+0x20/0xf4\n    ip_output+0x100/0x1a0\n    NF_HOOK+0xc4/0x16c\n    ip_forward+0x314/0x32c\n    ip_rcv+0x90/0x118\n    __netif_receive_skb+0x74/0x124\n    process_backlog+0xe8/0x1a4\n    __napi_poll+0x5c/0x1f8\n    net_rx_action+0x154/0x314\n    handle_softirqs+0x154/0x4b8\n\n    [118.376811] [C201134] rxq0_pus: [name:bug&]kernel BUG at net/core/skbuff.c:4278!\n    [118.376829] [C201134] rxq0_pus: [name:traps&]Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP\n    [118.470774] [C201134] rxq0_pus: [name:mrdump&]Kernel Offset: 0x178cc00000 from 0xffffffc008000000\n    [118.470810] [C201134] rxq0_pus: [name:mrdump&]PHYS_OFFSET: 0x40000000\n    [118.470827] [C201134] rxq0_pus: [name:mrdump&]pstate: 60400005 (nZCv daif +PAN -UAO)\n    [118.470848] [C201134] rxq0_pus: [name:mrdump&]pc : [0xffffffd79598aefc] skb_segment+0xcd0/0xd14\n    [118.470900] [C201134] rxq0_pus: [name:mrdump&]lr : [0xffffffd79598a5e8] skb_segment+0x3bc/0xd14\n    [118.470928] [C201134] rxq0_pus: [name:mrdump&]sp : ffffffc008013770",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.","weakness","Draft","Variant","Medium",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114],{"_key":25},"SUSE-SU-2025:02853-1",{"_key":27},"SUSE-SU-2025:02923-1",{"_key":29},"USN-7770-1",{"_key":31},"USN-7789-2",{"_key":33},"SUSE-SU-2025:02969-1",{"_key":35},"SUSE-SU-2025:03023-1",{"_key":37},"DLA-4328-1",{"_key":39},"DSA-5973-1",{"_key":41},"RHSA-2025:13962",{"_key":43},"RHSA-2025:14009",{"_key":45},"SUSE-SU-2025:02997-1",{"_key":47},"SUSE-SU-2025:03011-1",{"_key":49},"SUSE-SU-2025:20577-1",{"_key":51},"SUSE-SU-2025:20586-1",{"_key":53},"SUSE-SU-2025:20601-1",{"_key":55},"SUSE-SU-2025:20602-1",{"_key":57},"SUSE-SU-2025:21074-1",{"_key":59},"SUSE-SU-2025:21139-1",{"_key":61},"SUSE-SU-2025:21179-1",{"_key":63},"SUSE-SU-2025:02996-1",{"_key":65},"OPENSUSE-SU-2025:20081-1",{"_key":67},"MGASA-2025-0218",{"_key":69},"MGASA-2025-0219",{"_key":71},"DEBIAN-CVE-2025-38124",{"_key":73},"USN-8028-1",{"_key":75},"USN-8028-2",{"_key":77},"USN-8028-3",{"_key":79},"USN-8028-4",{"_key":81},"USN-8028-5",{"_key":83},"USN-8028-6",{"_key":85},"USN-8028-7",{"_key":87},"USN-8028-8",{"_key":89},"USN-8031-1",{"_key":91},"USN-8031-2",{"_key":93},"USN-8031-3",{"_key":95},"USN-8052-1",{"_key":97},"USN-8052-2",{"_key":99},"USN-8074-1",{"_key":101},"USN-8074-2",{"_key":103},"USN-8126-1",{"_key":105},"UBUNTU-CVE-2025-38124",{"_key":107},"USN-7769-1",{"_key":109},"USN-7769-2",{"_key":111},"USN-7769-3",{"_key":113},"USN-7771-1",{"_key":115},"USN-7789-1",[],[118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134],{"_key":25},{"_key":27},{"_key":33},{"_key":35},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},{"_key":67},{"_key":69},"2025-07-03T08:35:30.499Z","2026-05-23T15:59:03.670Z","Modified",{"cisa_kev":139,"cisa_ransomware":139,"cisa_vendor":9,"epss_severity":140,"epss_score":141,"severity":142,"severity_score":143,"severity_version":144,"severity_source":145,"severity_vector":146,"severity_status":137},false,"low",0.00101,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[148,154,158,162,166,170,175],{"url":149,"sources":150,"tags":152},"https://git.kernel.org/stable/c/0e65f38bd1aa14ea86e221b7bb814d38278d86c3",[151,145],"cve.org",[153],"Patch",{"url":155,"sources":156,"tags":157},"https://git.kernel.org/stable/c/85eef1748c024da1a191aed56b30a3a65958c50c",[151,145],[153],{"url":159,"sources":160,"tags":161},"https://git.kernel.org/stable/c/4399f59a9467a324ed46657555f0e1f209a14acb",[151,145],[153],{"url":163,"sources":164,"tags":165},"https://git.kernel.org/stable/c/a04302867094bdc6efac1b598370fc47cf3f2388",[151,145],[153],{"url":167,"sources":168,"tags":169},"https://git.kernel.org/stable/c/3382a1ed7f778db841063f5d7e317ac55f9e7f72",[151,145],[153],{"url":171,"sources":172,"tags":173},"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html",[151,145],[174],"Third Party Advisory",{"url":176,"sources":177,"tags":178},"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",[151,145],[],[],{"date":181,"score":141,"percentile":182},"2026-06-03",0.27549,[184,188,191,194,197,200,203,206,209,212,215,218,221,224,227,231,234,237,240,243,246,249,252,255,258,261,265,269,272,275,278,281,284,287,290,293,296,299,303,306,309,312,315,318,321,325,329,332,335,338,341,344,347,350,353,356,359,362,364,367,370,373,376,379,382,385,388,391,394,397,399,402,405,408,410,413,416,418,421,423,426,429,432,435,438,441,444,447,450,453],{"date":185,"score":186,"percentile":187},"2025-11-04",0.00068,0.21263,{"date":189,"score":186,"percentile":190},"2025-11-05",0.21262,{"date":192,"score":186,"percentile":193},"2025-11-06",0.21268,{"date":195,"score":186,"percentile":196},"2025-11-07",0.21279,{"date":198,"score":186,"percentile":199},"2025-11-08",0.21287,{"date":201,"score":186,"percentile":202},"2025-11-09",0.21251,{"date":204,"score":186,"percentile":205},"2025-11-10",0.21194,{"date":207,"score":186,"percentile":208},"2025-11-11",0.21215,{"date":210,"score":186,"percentile":211},"2025-11-12",0.21273,{"date":213,"score":186,"percentile":214},"2025-11-13",0.21284,{"date":216,"score":186,"percentile":217},"2025-11-14",0.21271,{"date":219,"score":186,"percentile":220},"2025-11-15",0.21246,{"date":222,"score":186,"percentile":223},"2025-11-16",0.21201,{"date":225,"score":186,"percentile":226},"2025-11-17",0.21164,{"date":228,"score":229,"percentile":230},"2025-11-18",0.00047,0.09785,{"date":232,"score":229,"percentile":233},"2025-11-19",0.09798,{"date":235,"score":229,"percentile":236},"2025-11-20",0.0982,{"date":238,"score":186,"percentile":239},"2025-11-21",0.21131,{"date":241,"score":186,"percentile":242},"2025-11-22",0.21122,{"date":244,"score":186,"percentile":245},"2025-11-23",0.21087,{"date":247,"score":186,"percentile":248},"2025-11-24",0.21063,{"date":250,"score":186,"percentile":251},"2025-11-25",0.21046,{"date":253,"score":186,"percentile":254},"2025-11-26",0.21034,{"date":256,"score":186,"percentile":257},"2025-11-27",0.20995,{"date":259,"score":186,"percentile":260},"2025-11-28",0.20975,{"date":262,"score":263,"percentile":264},"2025-11-29",0.00034,0.09268,{"date":266,"score":267,"percentile":268},"2025-11-30",0.00043,0.12603,{"date":270,"score":267,"percentile":271},"2025-12-01",0.12637,{"date":273,"score":267,"percentile":274},"2025-12-02",0.12652,{"date":276,"score":267,"percentile":277},"2025-12-03",0.1267,{"date":279,"score":267,"percentile":280},"2025-12-04",0.12653,{"date":282,"score":267,"percentile":283},"2025-12-05",0.12709,{"date":285,"score":267,"percentile":286},"2025-12-06",0.12715,{"date":288,"score":267,"percentile":289},"2025-12-07",0.12699,{"date":291,"score":267,"percentile":292},"2025-12-08",0.12706,{"date":294,"score":267,"percentile":295},"2025-12-09",0.12766,{"date":297,"score":267,"percentile":298},"2025-12-10",0.12836,{"date":300,"score":301,"percentile":302},"2025-12-11",0.00058,0.18233,{"date":304,"score":301,"percentile":305},"2025-12-12",0.18269,{"date":307,"score":301,"percentile":308},"2025-12-13",0.18281,{"date":310,"score":301,"percentile":311},"2025-12-14",0.18226,{"date":313,"score":301,"percentile":314},"2025-12-15",0.18207,{"date":316,"score":301,"percentile":317},"2025-12-16",0.18241,{"date":319,"score":301,"percentile":320},"2025-12-17",0.18327,{"date":322,"score":323,"percentile":324},"2025-12-18",0.00021,0.0504,{"date":326,"score":327,"percentile":328},"2025-12-19",0.00027,0.07142,{"date":330,"score":327,"percentile":331},"2025-12-20",0.07134,{"date":333,"score":327,"percentile":334},"2025-12-21",0.07122,{"date":336,"score":327,"percentile":337},"2025-12-22",0.07078,{"date":339,"score":327,"percentile":340},"2025-12-23",0.07076,{"date":342,"score":327,"percentile":343},"2025-12-24",0.07098,{"date":345,"score":327,"percentile":346},"2025-12-25",0.07167,{"date":348,"score":327,"percentile":349},"2025-12-26",0.07173,{"date":351,"score":323,"percentile":352},"2025-12-27",0.05038,{"date":354,"score":327,"percentile":355},"2025-12-28",0.07168,{"date":357,"score":327,"percentile":358},"2025-12-29",0.07148,{"date":360,"score":327,"percentile":361},"2025-12-30",0.07124,{"date":363,"score":327,"percentile":346},"2025-12-31",{"date":365,"score":327,"percentile":366},"2026-01-01",0.0723,{"date":368,"score":327,"percentile":369},"2026-01-02",0.07227,{"date":371,"score":327,"percentile":372},"2026-01-03",0.0722,{"date":374,"score":327,"percentile":375},"2026-01-04",0.07143,{"date":377,"score":327,"percentile":378},"2026-01-05",0.07092,{"date":380,"score":327,"percentile":381},"2026-01-06",0.07083,{"date":383,"score":327,"percentile":384},"2026-01-07",0.07107,{"date":386,"score":327,"percentile":387},"2026-01-08",0.07164,{"date":389,"score":327,"percentile":390},"2026-01-09",0.07179,{"date":392,"score":327,"percentile":393},"2026-01-10",0.07209,{"date":395,"score":327,"percentile":396},"2026-01-11",0.07195,{"date":398,"score":327,"percentile":346},"2026-01-12",{"date":400,"score":327,"percentile":401},"2026-01-13",0.07153,{"date":403,"score":327,"percentile":404},"2026-01-14",0.07198,{"date":406,"score":327,"percentile":407},"2026-01-15",0.07206,{"date":409,"score":327,"percentile":372},"2026-01-16",{"date":411,"score":327,"percentile":412},"2026-01-17",0.07231,{"date":414,"score":327,"percentile":415},"2026-01-18",0.07205,{"date":417,"score":327,"percentile":387},"2026-01-19",{"date":419,"score":327,"percentile":420},"2026-01-20",0.0713,{"date":422,"score":327,"percentile":334},"2026-01-21",{"date":424,"score":327,"percentile":425},"2026-01-22",0.071,{"date":427,"score":327,"percentile":428},"2026-01-23",0.0716,{"date":430,"score":327,"percentile":431},"2026-01-24",0.07216,{"date":433,"score":327,"percentile":434},"2026-01-25",0.07202,{"date":436,"score":327,"percentile":437},"2026-01-26",0.07185,{"date":439,"score":327,"percentile":440},"2026-01-27",0.06979,{"date":442,"score":327,"percentile":443},"2026-01-28",0.06955,{"date":445,"score":327,"percentile":446},"2026-01-29",0.06951,{"date":448,"score":327,"percentile":449},"2026-01-30",0.06965,{"date":451,"score":327,"percentile":452},"2026-01-31",0.06988,{"date":454,"score":327,"percentile":455},"2026-02-01",0.07035,[457],{"source":145,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":458,"cvss_v4_0":9},{"baseScore":143,"baseSeverity":459,"vectorString":146,"impactScore":460,"exploitabilityScore":461},"MEDIUM",6,4.6,[463,472,519],{"ecosystem":9,"name":464,"vendor":465,"product":466,"cpe_part":467,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":468},"debian linux","debian","debian_linux","o",[469],{"version":470,"is_range":139,"range_type":471,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0","cpe",{"ecosystem":9,"name":473,"vendor":474,"product":474,"cpe_part":475,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":476},"Linux","linux","a",[477,484,488,492,495,498,500,502,506,510,514,518],{"version":478,"is_range":479,"range_type":151,"version_start":480,"version_start_type":481,"version_end":482,"version_end_type":483,"fixed_in":9},">= 080e6c9a3908de193a48f646c5ce1bfb15676ffc, \u003C 0e65f38bd1aa14ea86e221b7bb814d38278d86c3",true,"080e6c9a3908de193a48f646c5ce1bfb15676ffc","including","0e65f38bd1aa14ea86e221b7bb814d38278d86c3","excluding",{"version":485,"is_range":479,"range_type":151,"version_start":486,"version_start_type":481,"version_end":487,"version_end_type":483,"fixed_in":9},">= af3122f5fdc0d00581d6e598a668df6bf54c9daa, \u003C 85eef1748c024da1a191aed56b30a3a65958c50c","af3122f5fdc0d00581d6e598a668df6bf54c9daa","85eef1748c024da1a191aed56b30a3a65958c50c",{"version":489,"is_range":479,"range_type":151,"version_start":490,"version_start_type":481,"version_end":491,"version_end_type":483,"fixed_in":9},">= a1e40ac5b5e9077fe1f7ae0eb88034db0f9ae1ab, \u003C 4399f59a9467a324ed46657555f0e1f209a14acb","a1e40ac5b5e9077fe1f7ae0eb88034db0f9ae1ab","4399f59a9467a324ed46657555f0e1f209a14acb",{"version":493,"is_range":479,"range_type":151,"version_start":490,"version_start_type":481,"version_end":494,"version_end_type":483,"fixed_in":9},">= a1e40ac5b5e9077fe1f7ae0eb88034db0f9ae1ab, \u003C a04302867094bdc6efac1b598370fc47cf3f2388","a04302867094bdc6efac1b598370fc47cf3f2388",{"version":496,"is_range":479,"range_type":151,"version_start":490,"version_start_type":481,"version_end":497,"version_end_type":483,"fixed_in":9},">= a1e40ac5b5e9077fe1f7ae0eb88034db0f9ae1ab, \u003C 3382a1ed7f778db841063f5d7e317ac55f9e7f72","3382a1ed7f778db841063f5d7e317ac55f9e7f72",{"version":499,"is_range":139,"range_type":151,"version_start":499,"version_start_type":481,"version_end":499,"version_end_type":481,"fixed_in":9},"33e28acf42ee863f332a958bfc2f1a284a3659df",{"version":501,"is_range":139,"range_type":151,"version_start":501,"version_start_type":481,"version_end":501,"version_end_type":481,"fixed_in":9},"3cd00d2e3655fad3bda96dc1ebf17b6495f86fea",{"version":503,"is_range":479,"range_type":151,"version_start":504,"version_start_type":481,"version_end":505,"version_end_type":483,"fixed_in":9},">= 6.1.113, \u003C 6.1.142","6.1.113","6.1.142",{"version":507,"is_range":479,"range_type":151,"version_start":508,"version_start_type":481,"version_end":509,"version_end_type":483,"fixed_in":9},">= 6.6.55, \u003C 6.6.94","6.6.55","6.6.94",{"version":511,"is_range":479,"range_type":151,"version_start":512,"version_start_type":481,"version_end":513,"version_end_type":483,"fixed_in":9},">= 6.10.14, \u003C 6.11","6.10.14","6.11",{"version":515,"is_range":479,"range_type":151,"version_start":516,"version_start_type":481,"version_end":517,"version_end_type":483,"fixed_in":9},">= 6.11.3, \u003C 6.12","6.11.3","6.12",{"version":517,"is_range":139,"range_type":151,"version_start":517,"version_start_type":481,"version_end":517,"version_end_type":481,"fixed_in":9},{"ecosystem":9,"name":520,"vendor":474,"product":521,"cpe_part":467,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":522},"linux kernel","linux_kernel",[523,525,527,529,531,535,539,540,542,544,546,548,550],{"version":524,"is_range":479,"range_type":471,"version_start":504,"version_start_type":481,"version_end":505,"version_end_type":483,"fixed_in":9},"gte6.1.113_lt6.1.142",{"version":526,"is_range":479,"range_type":471,"version_start":508,"version_start_type":481,"version_end":509,"version_end_type":483,"fixed_in":9},"gte6.6.55_lt6.6.94",{"version":528,"is_range":479,"range_type":471,"version_start":512,"version_start_type":481,"version_end":513,"version_end_type":483,"fixed_in":9},"gte6.10.14_lt6.11",{"version":530,"is_range":479,"range_type":471,"version_start":516,"version_start_type":481,"version_end":517,"version_end_type":483,"fixed_in":9},"gte6.11.3_lt6.12",{"version":532,"is_range":479,"range_type":471,"version_start":533,"version_start_type":481,"version_end":534,"version_end_type":483,"fixed_in":9},"gte6.12.1_lt6.12.34","6.12.1","6.12.34",{"version":536,"is_range":479,"range_type":471,"version_start":537,"version_start_type":481,"version_end":538,"version_end_type":483,"fixed_in":9},"gte6.13_lt6.15.3","6.13","6.15.3",{"version":517,"is_range":139,"range_type":471,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":541,"is_range":139,"range_type":471,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.12:rc2",{"version":543,"is_range":139,"range_type":471,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.12:rc3",{"version":545,"is_range":139,"range_type":471,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.12:rc4",{"version":547,"is_range":139,"range_type":471,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.12:rc5",{"version":549,"is_range":139,"range_type":471,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.12:rc6",{"version":551,"is_range":139,"range_type":471,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.12:rc7"]