CVE-2025-38166

A flaw was found in the Linux kernel. A local privileged user can cause a Denial of Service (DoS) by triggering a kernel crash. When a Berkeley Packet Filter (BPF) program attached to a kernel Transport Layer Security (kTLS) socket modifies message data and encounters socket corking, the kernel incorrectly calculates buffer rollback boundaries. This inconsistency triggers a kernel panic, causing the system to crash.

This vulnerability is rated as Moderate because exploitation requires local access and the capability to attach BPF sockmap programs to kernel TLS sockets, resulting in a denial of service via a kernel panic without compromising data confidentiality or integrity. In standard Red Hat Enterprise Linux configurations, unprivileged users are restricted from loading eBPF programs by default, significantly limiting exposure. Consequently, only privileged local processes with administrative privileges or capabilities such as CAP_BPF or CAP_SYS_ADMIN can trigger the condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.