#VU113314 Resource management error in Linux kernel - CVE-2025-38439

Vulnerability identifier: #VU113314

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-38439

CWE-ID: CWE-399

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the __bnxt_xmit_xdp_redirect() function in drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's repository.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/16ae306602163fcb7ae83f2701b542e43c100cee
https://git.kernel.org/stable/c/3cdf199d4755d477972ee87110b2aebc88b3cfad
https://git.kernel.org/stable/c/50dad9909715094e7d9ca25e9e0412b875987519
https://git.kernel.org/stable/c/5909679a82cd74cf0343d9e3ddf4b6931aa7e613
https://git.kernel.org/stable/c/8d672a1a6bfc81fef9151925c9c0481f4acf4bec
https://git.kernel.org/stable/c/e260f4d49370c85a4701d43c6d16b8c39f8b605f
https://git.kernel.org/stable/c/f154e41e1d9d15ab21300ba7bbf0ebb5cb3b9c2a
https://git.kernel.org/stable/c/f9eaf6d036075dc820520e1194692c0619b7297b

---

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?