Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2025-38525
CVE-2025-38525:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2025-38525 is a vulnerability discovered in the Linux kernel related to interrupt handling in the rxrpc subsystem. The issue was disclosed on August 16, 2025, and affects the rxrpcassessMTU_size() function's interaction with the IP layer (NVD).
Technical details
The vulnerability occurs when the rxrpcassessMTUsize() function calls into the IP layer to determine the MTU size for a route. When accepting an incoming call through rxrpcnewincomingcall(), the function holds interrupts disabled while making these IP layer calls. This creates a conflict with the IP layer's use of localbhenable(), which throws a warning when IRQs are enabled in certain configurations (NVD).
Impact
The issue primarily affects system stability and can trigger kernel warnings. The specific warning occurs at kernel/softirq.c:387 in the _localbhenableip function, indicating a potential interrupt handling conflict that could impact system reliability (NVD).
Mitigation and workarounds
The fix involves moving the call to rxrpcassessMTUsize() out of rxrpcinit_peer() and relocating it higher in the stack where it can be executed without interrupts disabled. This modification is safe as the path MTU discovery is performed by the I/O thread at this point (NVD, Debian).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management