CVE-2025-38061

In the Linux kernel, the following vulnerability has been resolved:

net: pktgen: fix access outside of user given buffer in pktgen_thread_write()

Honour the user given buffer size for the strn_len() calls (otherwise strn_len() will access memory outside of the user given buffer).

This fix bounds the parsed input to the user‑supplied buffer size, preventing out‑of‑range reads in pktgen_thread_write(). Note that only privileged users can write to /proc/net/pktgen/*, so exploitation requires local root access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.