CVE-2025-39990
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
15/10/2025
Última modificación:
30/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
bpf: Check the helper function is valid in get_helper_proto<br />
<br />
kernel test robot reported verifier bug [1] where the helper func<br />
pointer could be NULL due to disabled config option.<br />
<br />
As Alexei suggested we could check on that in get_helper_proto<br />
directly. Marking tail_call helper func with BPF_PTR_POISON,<br />
because it is unused by design.<br />
<br />
[1] https://lore.kernel.org/oe-lkp/202507160818.68358831-lkp@intel.com
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA