CVE-2025-38162

A flaw was found in the Linux kernel. An integer overflow vulnerability exists in the netfilter subsystem, specifically within the nft_set_pipapo module's lookup table allocation. This occurs when calculating the lookup table size, where a multiplication operation can overflow. This flaw could allow a local user to cause a Denial of Service (DoS) by triggering the integer overflow, leading to system instability or crashes.

A moderate-severity flaw was found in the Linux kernel's netfilter subsystem, in the nft_set_pipapo module used for nftables set lookups. When the lookup table size is calculated, a multiplication can overflow if a set is created with large field lengths, and a local user who can trigger such a set creation could cause this integer overflow, leading to system instability or a crash (denial of service). Red Hat assessed the impact as Moderate with CVSS 3.1 score 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), reflecting a local attack vector that affects availability only. This differs from the CVE.org record, which assigns a CVSS 3.1 score of 7.8 with high confidentiality and integrity impacts; Red Hat's assessment, consistent with the nature of the upstream fix, is that only availability is affected. The vulnerable pipapo set code is not present in Red Hat Enterprise Linux 6 and 7, so those releases are not affected. Red Hat Enterprise Linux 8, 9, and 10 and Red Hat In-Vehicle OS are affected; because the flaw is a local, availability-only denial of service, the fix has been deferred for these releases, and the residual risk is that a local user could crash the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.