CVE-2025-38611

kernel: vmci: Prevent the dispatching of uninitialized payloads

Published Aug 19, 2025 CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed

Description

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No data.

No data available yet.

No remediation available yet

Source	ID	Title
EUVD	EUVD-2025-26089	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

No CVSS v4.0

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://lore.kernel.org/linux-cve-announce/2025081923-CVE-2025-38611-e9f6@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-38611
https://www.cve.org/CVERecord?id=CVE-2025-38611

History

Type	Values Removed	Values Added
References	https://git.kernel.org/stable/c/2c86366ce37f398e20fa09e7e9dc8788fbf6cf0c https://git.kernel.org/stable/c/6696a46f4ebdc7314ff23a2fb0e93a95da2c45ee https://git.kernel.org/stable/c/7624fe66a0832eb6fe4e465fcdd4f9104fb9b339 https://git.kernel.org/stable/c/87f8f8654e55cf9327cc63746595085a041699dc https://git.kernel.org/stable/c/94112b0d443e0b6b5bb17854f97c1498064cc9ed https://git.kernel.org/stable/c/a85dc83857497fa1f68a9b23e7213949d4cb51ea https://git.kernel.org/stable/c/b097d921efb5bb150066365287ff046b8c8b29f5 https://git.kernel.org/stable/c/bfb4cf9fb97e4063f0aa62e9e398025fb6625031 https://git.kernel.org/stable/c/bfd6b211fe8aae79acbedd19e8d5bea5d062a41b

Type	Values Removed	Values Added
Description	In the Linux kernel, the following vulnerability has been resolved: vmci: Prevent the dispatching of uninitialized payloads The reproducer executes the host's unlocked_ioctl call in two different tasks. When init_context fails, the struct vmci_event_ctx is not fully initialized when executing vmci_datagram_dispatch() to send events to all vm contexts. This affects the datagram taken from the datagram queue of its context by another task, because the datagram payload is not initialized according to the size payload_size, which causes the kernel data to leak to the user space. Before dispatching the datagram, and before setting the payload content, explicitly set the payload content to 0 to avoid data leakage caused by incomplete payload initialization.	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Title	vmci: Prevent the dispatching of uninitialized payloads	kernel: vmci: Prevent the dispatching of uninitialized payloads

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/2c86366ce37f398e20fa09e7e9dc8788fbf6cf0c https://git.kernel.org/stable/c/a85dc83857497fa1f68a9b23e7213949d4cb51ea https://git.kernel.org/stable/c/b097d921efb5bb150066365287ff046b8c8b29f5

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Vendors & Products		Linux Linux linux Kernel

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025081923-CVE-2025-38611-e9f6@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2025-38611 https://www.cve.org/CVERecord?id=CVE-2025-38611
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: vmci: Prevent the dispatching of uninitialized payloads The reproducer executes the host's unlocked_ioctl call in two different tasks. When init_context fails, the struct vmci_event_ctx is not fully initialized when executing vmci_datagram_dispatch() to send events to all vm contexts. This affects the datagram taken from the datagram queue of its context by another task, because the datagram payload is not initialized according to the size payload_size, which causes the kernel data to leak to the user space. Before dispatching the datagram, and before setting the payload content, explicitly set the payload content to 0 to avoid data leakage caused by incomplete payload initialization.
Title		vmci: Prevent the dispatching of uninitialized payloads
References		https://git.kernel.org/stable/c/6696a46f4ebdc7314ff23a2fb0e93a95da2c45ee https://git.kernel.org/stable/c/7624fe66a0832eb6fe4e465fcdd4f9104fb9b339 https://git.kernel.org/stable/c/87f8f8654e55cf9327cc63746595085a041699dc https://git.kernel.org/stable/c/94112b0d443e0b6b5bb17854f97c1498064cc9ed https://git.kernel.org/stable/c/bfb4cf9fb97e4063f0aa62e9e398025fb6625031 https://git.kernel.org/stable/c/bfd6b211fe8aae79acbedd19e8d5bea5d062a41b