CVE-2025-39990

CVE-2025-39990

High · published October 15, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: Check the helper function is valid in get_helper_proto

kernel test robot reported verifier bug [1] where the helper func

pointer could be NULL due to disabled config option.

As Alexei suggested we could check on that in get_helper_proto

directly. Marking tail_call helper func with BPF_PTR_POISON,

because it is unused by design.

[1] https://lore.kernel.org/oe-lkp/[email protected]

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Published
2025-10-15T12:15Z
References (4)
https://git.kernel.org/stable/c/3d429cb1278e995e22995ef117fa96d223a67e93 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6233715b4b714068d6c831d214a4e8792109875a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dfbff47f120e4b0793ca0e0b8660361ccac25a74 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e4414b01c1cd9887bbde92f946c1ba94e40d6d64 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 OCT 07:56Z
    bpf: Check the helper function is valid in get_helper_proto
    cvelistv5