In the Linux kernel, the following vulnerability has been resolved: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls When sending plaintext data, we initially calculated the corresponding ciphertext length. However, if we later reduced the plaintext data length via socket policy, we failed to recalculate the ciphertext length. This results in transmitting buffers containing uninitialized data during ciphertext transmission. This causes uninitialized bytes to be appended after a complete "Application Data" packet, leading to errors on the receiving end when parsing TLS record.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/0e853c1464bcf61207f8b5c32d2ac5ee495e859d cve-icon cve-icon
https://git.kernel.org/stable/c/16aca8bb4ad0d8a13c8b6da4007f4e52d53035bb cve-icon cve-icon
https://git.kernel.org/stable/c/178f6a5c8cb3b6be1602de0964cd440243f493c9 cve-icon cve-icon
https://git.kernel.org/stable/c/1e480387d4b42776f8957fb148af9d75ce93b96d cve-icon cve-icon
https://git.kernel.org/stable/c/90d6ef67440cec2a0aad71a0108c8f216437345c cve-icon cve-icon
https://git.kernel.org/stable/c/ee03766d79de0f61ea29ffb6ab1c7b196ea1b02e cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025081923-CVE-2025-38608-e829@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-38608 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-38608 cve-icon
History

Thu, 21 Aug 2025 12:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 20 Aug 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 19 Aug 2025 17:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls When sending plaintext data, we initially calculated the corresponding ciphertext length. However, if we later reduced the plaintext data length via socket policy, we failed to recalculate the ciphertext length. This results in transmitting buffers containing uninitialized data during ciphertext transmission. This causes uninitialized bytes to be appended after a complete "Application Data" packet, leading to errors on the receiving end when parsing TLS record.
Title bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-08-19T17:03:51.688Z

Reserved: 2025-04-16T04:51:24.028Z

Link: CVE-2025-38608

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-08-19T17:15:39.203

Modified: 2025-08-20T14:40:17.713

Link: CVE-2025-38608

cve-icon Redhat

Severity : Low

Publid Date: 2025-08-19T00:00:00Z

Links: CVE-2025-38608 - Bugzilla