CVE-2025-38403

Updated: 2025-12-28 03:38:12.536981

Description:

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transport_packet_init memset the vmci_transport_packet before populating the fields to avoid any uninitialised data being left in the structure.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH In Testing 2026-01-20 17:52:06
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2025:1757967705 2025-09-30 05:41:40
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Needs Triage 2025-12-28 07:55:51
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Needs Triage 2025-12-28 07:55:50
CentOS Stream 8 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2026:1770032032 2026-02-02 15:22:36
CloudLinux 7 ELS kernel 3.10.0 7.8 HIGH Needs Triage 2025-12-28 07:55:56
Oracle Linux 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2025:1757698145 2025-09-12 19:20:27
Oracle Linux 7 ELS kernel-uek 5.4.17 7.8 HIGH Released CLSA-2025:1764085382 2025-11-25 20:35:39
RHEL 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2025:1757693980 2025-09-13 06:30:12
TuxCare 9.6 ESU kernel 5.14.0 7.8 HIGH In Testing 2026-02-05 12:57:59
Total: 14