Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2025-39990
CVE-2025-39990:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2025-39990 was published on October 15, 2025, affecting the Linux kernel. The vulnerability is related to the BPF subsystem, specifically involving a verifier bug where the helper function pointer could be NULL due to a disabled config option (NVD).
Technical details
The vulnerability involves the BPF (Berkeley Packet Filter) subsystem in the Linux kernel. The issue occurs in the get_helper_proto function where a helper function pointer could become NULL when certain configuration options are disabled. As part of the fix, the tail_call helper function was marked with BPF_PTR_POISON since it is unused by design (NVD).
Impact
The vulnerability affects various Linux distributions and their kernel packages. Multiple Ubuntu releases including 24.04 LTS noble, 22.04 LTS jammy, and others are marked as vulnerable to this issue (Ubuntu).
Additional resources
Source: This report was generated using AI
Related Linux Kernel vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management