CVE-2025-38257: debian debian_linux
Vulnerability summary
CVE-2025-38257 is a high (CVSS 7.8) vulnerability in debian debian_linux. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 59 · Related 54Timeline
- 09-07-2025PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Prevent overflow in size calculation for memdup_user() Number of apqn target list entries contained in 'nr_apqns' variable is determined by userspace via an ioctl call so the result of the product in calculation of size passed to memdup_user() may overflow. In this case the actual size of the allocated area and the value describing it won't be in sync leading to various types of unpredictable behaviour later. Use a proper memdup_array_user() helper which returns an error if an overflow is detected. Note that it is different from when nr_apqns is initially zero - that case is considered valid and should be handled in subsequent pkey_handler implementations. Found by Linux Verification Center (linuxtesting.org).
CVSS metrics
5 scores · 4 sources · 2 versions- CVE.orgCNA7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:HDiffers
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
+0.02 pp
From 0.16% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu142 products
- linuxAll versions (No fix recorded) | < 5.15.0-156.166 | < 6.8.0-100.100
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1092.99 | < 6.8.0-1046.49
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.147-1 | < 6.12.37-1
- debian_linuxEOL11.0
Linux2 products
- linux≥ f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d, < ad1bdd24a02d5a8d119af8e4cd50933780a6d29f | ≥ f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d, < faa1ab4a23c42e34dc000ef4977b751d94d5148c | ≥ f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d, < 88f3869649edbc4a13f6c2877091f81cd5a50f05 | ≥ f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d, < f855b119e62b004a5044ed565f2a2b368c4d3f16 | ≥ f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d, < 73483ca7e07a5e39bdf612eec9d3d293e8bef649 | ≥ f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d, < 7360ee47599af91a1d5f4e74d635d9408a54e489 | 5.4
- linux_kernel≥ 5.4, < 5.15.187 | ≥ 5.16, < 6.1.143 | ≥ 6.2, < 6.6.96 | ≥ 6.7, < 6.12.36 | ≥ 6.13, < 6.15.5 | 6.16:rc1 | 6.16:rc2 | 6.16:rc3
3 vendors · 146 products
