CVE-2025-38545: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-38545 is a vulnerability discovered in the Linux kernel, specifically affecting the network ethernet subsystem's TI AM65 CPSW-NUSS driver. The vulnerability was disclosed on August 16, 2025, and involves improper memory allocation for the skbsharedinfo member during the transition from netdevallocipalign() to buildskb() functions (NVD).

The vulnerability occurs in the network stack's memory management where during the transition from netdevallocipalign() to buildskb(), the memory for the 'skbsharedinfo' member of an 'skb' was not properly allocated. The fix involves allocating PAGESIZE as the skb length, which accounts for the packet length, headroom, and tailroom, thereby including the required memory space for skbshared_info (Debian Tracker).

The vulnerability affects various Linux distributions and their kernel packages. Ubuntu has marked this with Medium priority, indicating moderate severity. Multiple Linux distributions including Debian and Ubuntu have been affected across different versions of their kernel packages (Ubuntu Security).

Various Linux distributions have released fixes for this vulnerability. Debian has fixed this in multiple releases including bullseye (5.10.237-1), bookworm (6.1.147-1), and trixie (6.12.41-1). Ubuntu has also addressed this issue across various kernel flavors and versions (Debian Tracker).