Search/CVE-2025-38408
● CVE — High

CVE-2025-38408

VendorlinuxProductlinux kernelDiscoveredJul 25, 2025UpdatedJul 30, 2026

In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize ops member's pointers properly by using kzalloc() instead of kmalloc() when allocating the simulation work context. Otherwise the pointers contain random content leading to invalid dereferencing.

CVSS v3.1
7.8 HIGH
EPSS
0.20%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
31
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 27, 2026
▲ 0.03pp
0.17% → 0.20% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
33 relationships
Timeline
disclosure → media coverage
Jul 25, 2025
Disclosure — published as a CVE record. · last revised by NVD Jul 30, 2026
Oct 21, 2025
ubuntu.com reports: USN-7833-1: Linux kernel vulnerabilities
Oct 22, 2025
ubuntu.com reports: USN-7834-1: Linux kernel (Azure) vulnerabilities
Oct 22, 2025
ubuntu.com reports: USN-7833-2: Linux kernel (Real-time) vulnerabilities
Oct 24, 2025
ubuntu.com reports: USN-7833-3: Linux kernel (AWS) vulnerabilities
Oct 31, 2025
ubuntu.com reports: USN-7833-4: Linux kernel (GCP) vulnerabilities
Nov 4, 2025
ubuntu.com reports: USN-7856-1: Linux kernel (HWE) vulnerabilities
Feb 11, 2026
ubuntu.com reports: USN-8028-1: Linux kernel vulnerabilities
Feb 12, 2026
ubuntu.com reports: USN-8028-2: Linux kernel (Real-time) vulnerabilities
Feb 12, 2026
ubuntu.com reports: USN-8031-1: Linux kernel (GCP) vulnerabilities
Feb 17, 2026
ubuntu.com reports: USN-8028-3: Linux kernel (Real-time) vulnerabilities
Feb 17, 2026
ubuntu.com reports: USN-8028-4: Linux kernel (FIPS) vulnerabilities
Feb 17, 2026
ubuntu.com reports: USN-8028-5: Linux kernel vulnerabilities
Feb 18, 2026
ubuntu.com reports: USN-8031-2: Linux kernel (GCP FIPS) vulnerabilities
Feb 19, 2026
ubuntu.com reports: USN-8028-6: Linux kernel (HWE) vulnerabilities
Feb 19, 2026
ubuntu.com reports: USN-8031-3: Linux kernel vulnerabilities
Feb 19, 2026
ubuntu.com reports: USN-8052-1: Linux kernel (Low Latency) vulnerabilities
Feb 19, 2026
ubuntu.com reports: USN-8028-7: Linux kernel (Low Latency NVIDIA) vulnerabilities
Feb 24, 2026
ubuntu.com reports: USN-8028-8: Linux kernel (IBM) vulnerabilities
Feb 24, 2026
ubuntu.com reports: USN-8052-2: Linux kernel (Xilinx) vulnerabilities
Mar 4, 2026
ubuntu.com reports: USN-8074-1: Linux kernel (Azure) vulnerabilities
Mar 4, 2026
ubuntu.com reports: USN-8074-2: Linux kernel (Azure FIPS) vulnerabilities
Mar 25, 2026
ubuntu.com reports: USN-8126-1: Linux kernel (Azure) vulnerabilities
Apr 16, 2026
ubuntu.com reports: USN-8180-1: Linux kernel vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8180-2: Linux kernel (FIPS) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8186-1: Linux kernel (Real-time) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8187-1: Linux kernel (NVIDIA) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8188-1: Linux kernel (HWE) vulnerabilities
Apr 24, 2026
ubuntu.com reports: USN-8180-5: Linux kernel (IBM) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8243-1: Linux kernel (Azure) vulnerabilities
May 11, 2026
ubuntu.com reports: USN-8180-6: Linux kernel (Raspberry Pi) vulnerabilities
May 19, 2026
ubuntu.com reports: USN-8275-1: Linux kernel (Xilinx ZynqMP) vulnerabilities