CVE-2025-38493

A flaw was found in the Linux kernel. A local user can trigger a buffer overflow in the __timerlat_dump_stack() function within the tracing/osnoise component. This occurs because the entry->size field, which determines the buffer size for a memory copy operation, contains uninitialized data, leading to an incorrect size being used. Successful exploitation of this vulnerability results in a kernel panic, causing a Denial of Service (DoS) on the affected system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.