< Back

CVE-2025-38528

Updated on 16 Aug 2025

Severity

5.5 Medium severity

Details

CVSS score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected product
Affected component
Links: NIST CIRCL RHEL Ubuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

bpf: Reject %p% format string in bprintf-like helpers

static const char fmt[] = “%p%”; bpf_trace_printk(fmt, sizeof(fmt));

The above BPF program isn’t rejected and causes a kernel warning at runtime:

Please remove unsupported %\x00 in format string WARNING: CPU: 1 PID: 7244 at lib/vsprintf.c:2680 format_decode+0x49c/0x5d0

This happens because bpf_bprintf_prepare skips over the second %, detected as punctuation, while processing %p. This patch fixes it by not skipping over punctuation. %\x00 is then processed in the next iteration and rejected.

Details

Affected product:: AlmaLinux 9.2 ESU , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , TuxCare 9.6 ESU , Ubuntu 20.04 ELS
Affected packages:: linux @ 5.4.0 (+5 more)

Fixes

Operating system / Project

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system	Status	Covered kernels
AlmaLinux 9.2 ESU	Planned	—
AlmaLinux 9.6 ESU	Planned	—
Amazon Linux 2023	Planned	—
Debian 13	Planned	—
Oracle Linux 8 UEK 7	Released	77 kernels 5.15.0-102.110.5.el8uek 5.15.0-101.103.2.1.el8uek 5.15.0-8.91.4.1.el8uek 5.15.0-7.86.6.1.el8uek 5.15.0-2.52.3.el8uek 5.15.0-100.96.32.el8uek 5.15.0-5.76.5.1.el8uek 5.15.0-6.80.3.1.el8uek 5.15.0-3.60.5.1.el8uek 5.15.0-0.30.20.el8uek 5.15.0-1.43.4.1.el8uek 5.15.0-0.30.20.1.el8uek 5.15.0-1.43.4.2.el8uek 5.15.0-4.70.5.2.el8uek 5.15.0-104.119.4.2.el8uek 5.15.0-0.30.19.el8uek 5.15.0-105.125.6.2.el8uek 5.15.0-105.125.6.2.1.el8uek 5.15.0-105.125.6.2.2.el8uek 5.15.0-106.131.4.el8uek 5.15.0-200.131.27.el8uek 5.15.0-200.131.27.1.el8uek 5.15.0-201.135.6.el8uek 5.15.0-202.135.2.el8uek 5.15.0-102.110.5.1.el8uek 5.15.0-103.114.4.el8uek 5.15.0-203.146.5.1.el8uek 5.15.0-204.147.6.2.el8uek 5.15.0-204.147.6.3.el8uek 5.15.0-205.149.5.1.el8uek 5.15.0-205.149.5.4.el8uek 5.15.0-206.153.7.el8uek 5.15.0-206.153.7.1.el8uek 5.15.0-207.156.6.el8uek 5.15.0-208.159.3.el8uek 5.15.0-208.159.3.2.el8uek 5.15.0-209.161.7.el8uek 5.15.0-209.161.7.1.el8uek 5.15.0-209.161.7.2.el8uek 5.15.0-210.163.7.el8uek 5.15.0-300.163.18.el8uek 5.15.0-300.163.18.1.el8uek 5.15.0-300.163.18.1.1.el8uek 5.15.0-301.163.5.2.el8uek 5.15.0-302.167.6.el8uek 5.15.0-300.163.18.7.el8uek 5.15.0-302.167.6.1.el8uek 5.15.0-303.171.5.2.el8uek 5.15.0-303.171.5.2.1.el8uek 5.15.0-304.171.4.el8uek 5.15.0-304.171.4.1.el8uek 5.15.0-304.171.4.3.el8uek 5.15.0-303.171.5.2.2.el8uek 5.15.0-305.176.4.el8uek 5.15.0-306.177.4.el8uek 5.15.0-306.177.4.1.el8uek 5.15.0-307.178.5.el8uek 5.15.0-308.179.6.el8uek 5.15.0-308.179.6.2.el8uek 5.15.0-308.179.6.3.el8uek 5.15.0-309.180.4.el8uek 5.15.0-308.179.6.7.el8uek 5.15.0-309.180.4.2.el8uek 5.15.0-308.179.6.11.el8uek 5.15.0-310.184.5.2.el8uek 5.15.0-310.184.5.3.el8uek 5.15.0-311.185.9.el8uek 5.15.0-308.179.6.14.el8uek 5.15.0-312.187.5.el8uek 5.15.0-312.187.5.1.el8uek 5.15.0-312.187.5.2.el8uek 5.15.0-312.187.5.3.el8uek 5.15.0-308.179.6.16.el8uek 5.15.0-313.189.5.1.el8uek 5.15.0-313.189.5.2.el8uek 5.15.0-313.189.5.3.el8uek 5.15.0-308.179.6.18.el8uek
Oracle Linux 9 UEK 7	Released	77 kernels 5.15.0-101.103.2.1.el9uek 5.15.0-8.91.4.1.el9uek 5.15.0-7.86.6.1.el9uek 5.15.0-5.76.5.1.el9uek 5.15.0-6.80.3.1.el9uek 5.15.0-3.60.5.1.el9uek 5.15.0-0.30.20.el9uek 5.15.0-100.96.32.el9uek 5.15.0-1.43.4.2.el9uek 5.15.0-2.52.3.el9uek 5.15.0-4.70.5.2.el9uek 5.15.0-1.43.4.1.el9uek 5.15.0-0.30.20.1.el9uek 5.15.0-102.110.5.el9uek 5.15.0-102.110.5.1.el9uek 5.15.0-103.114.4.el9uek 5.15.0-104.119.4.2.el9uek 5.15.0-0.30.19.el9uek 5.15.0-105.125.6.2.el9uek 5.15.0-105.125.6.2.1.el9uek 5.15.0-105.125.6.2.2.el9uek 5.15.0-106.131.4.el9uek 5.15.0-200.131.27.el9uek 5.15.0-200.131.27.1.el9uek 5.15.0-201.135.6.el9uek 5.15.0-202.135.2.el9uek 5.15.0-203.146.5.1.el9uek 5.15.0-204.147.6.2.el9uek 5.15.0-204.147.6.3.el9uek 5.15.0-205.149.5.1.el9uek 5.15.0-205.149.5.4.el9uek 5.15.0-206.153.7.el9uek 5.15.0-206.153.7.1.el9uek 5.15.0-207.156.6.el9uek 5.15.0-208.159.3.el9uek 5.15.0-208.159.3.2.el9uek 5.15.0-209.161.7.el9uek 5.15.0-209.161.7.1.el9uek 5.15.0-209.161.7.2.el9uek 5.15.0-210.163.7.el9uek 5.15.0-300.163.18.el9uek 5.15.0-300.163.18.1.el9uek 5.15.0-300.163.18.1.1.el9uek 5.15.0-301.163.5.2.el9uek 5.15.0-302.167.6.el9uek 5.15.0-300.163.18.7.el9uek 5.15.0-302.167.6.1.el9uek 5.15.0-303.171.5.2.el9uek 5.15.0-303.171.5.2.1.el9uek 5.15.0-304.171.4.el9uek 5.15.0-304.171.4.1.el9uek 5.15.0-304.171.4.3.el9uek 5.15.0-303.171.5.2.2.el9uek 5.15.0-305.176.4.el9uek 5.15.0-306.177.4.el9uek 5.15.0-306.177.4.1.el9uek 5.15.0-307.178.5.el9uek 5.15.0-308.179.6.el9uek 5.15.0-308.179.6.2.el9uek 5.15.0-308.179.6.3.el9uek 5.15.0-309.180.4.el9uek 5.15.0-308.179.6.7.el9uek 5.15.0-309.180.4.2.el9uek 5.15.0-308.179.6.11.el9uek 5.15.0-310.184.5.2.el9uek 5.15.0-310.184.5.3.el9uek 5.15.0-311.185.9.el9uek 5.15.0-308.179.6.14.el9uek 5.15.0-312.187.5.el9uek 5.15.0-312.187.5.1.el9uek 5.15.0-312.187.5.2.el9uek 5.15.0-312.187.5.3.el9uek 5.15.0-308.179.6.16.el9uek 5.15.0-313.189.5.1.el9uek 5.15.0-313.189.5.2.el9uek 5.15.0-313.189.5.3.el9uek 5.15.0-308.179.6.18.el9uek
Proxmox VE 7 5.15	Released	47 kernels 5.15.5-1-pve-5.15.5-1 5.15.12-1-pve-5.15.12-2 5.15.12-1-pve-5.15.12-3 5.15.17-1-pve-5.15.17-1 5.15.19-1-pve-5.15.19-1 5.15.19-2-pve-5.15.19-2 5.15.19-2-pve-5.15.19-3 5.15.27-1-pve-5.15.27-1 5.15.30-1-pve-5.15.30-1 5.15.30-2-pve-5.15.30-3 5.15.35-1-pve-5.15.35-1 5.15.35-1-pve-5.15.35-2 5.15.35-1-pve-5.15.35-3 5.15.35-2-pve-5.15.35-4 5.15.35-2-pve-5.15.35-5 5.15.35-3-pve-5.15.35-6 5.15.39-1-pve-5.15.39-1 5.15.39-2-pve-5.15.39-2 5.15.39-3-pve-5.15.39-3 5.15.39-4-pve-5.15.39-4 5.15.7-1-pve-5.15.7-1 5.15.53-1-pve-5.15.53-1 5.15.60-1-pve-5.15.60-1 5.15.60-2-pve-5.15.60-2 5.15.64-1-pve-5.15.64-1 5.15.74-1-pve-5.15.74-1 5.15.83-1-pve-5.15.83-1 5.15.102-1-pve-5.15.102-1 5.15.104-1-pve-5.15.104-1 5.15.104-1-pve-5.15.104-2 5.15.107-1-pve-5.15.107-1 5.15.107-2-pve-5.15.107-2 5.15.85-1-pve-5.15.85-1 5.15.108-1-pve-5.15.108-1 5.15.108-1-pve-5.15.108-2 5.15.116-1-pve-5.15.116-1 5.15.126-1-pve-5.15.126-1 5.15.131-1-pve-5.15.131-1 5.15.131-1-pve-5.15.131-2 5.15.131-2-pve-5.15.131-3 5.15.136-1-pve-5.15.136-1 5.15.111-1-pve-5.15.111-1 5.15.143-1-pve-5.15.143-1 5.15.149-1-pve-5.15.149-1 5.15.152-1-pve-5.15.152-1 5.15.158-1-pve_5.15.158-1 5.15.158-2-pve_5.15.158-2
Ubuntu 20.04 HWE AWS	Released	57 kernels 5.15.0-1026.30~20.04.2 5.15.0-1022.26~20.04.1 5.15.0-1023.27~20.04.1 5.15.0-1021.25~20.04.1 5.15.0-1020.24~20.04.1 5.15.0-1017.21~20.04.1 5.15.0-1019.23~20.04.1 5.15.0-1014.18~20.04.1 5.15.0-1015.19~20.04.1 5.15.0-1018.22~20.04.1 5.15.0-1027.31~20.04.1 5.15.0-1028.32~20.04.1 5.15.0-1030.34~20.04.1 5.15.0-1031.35~20.04.1 5.15.0-1033.37~20.04.1 5.15.0-1034.38~20.04.1 5.15.0-1035.39~20.04.1 5.15.0-1036.40~20.04.1 5.15.0-1037.41~20.04.1 5.15.0-1038.43~20.04.1 5.15.0-1039.44~20.04.1 5.15.0-1040.45~20.04.1 5.15.0-1041.46~20.04.1 5.15.0-1043.48~20.04.1 5.15.0-1044.49~20.04.1 5.15.0-1045.50~20.04.1 5.15.0-1047.52~20.04.1 5.15.0-1048.53~20.04.1 5.15.0-1049.54~20.04.1 5.15.0-1050.55~20.04.1 5.15.0-1051.56~20.04.1 5.15.0-1052.57~20.04.1 5.15.0-1053.58~20.04.1 5.15.0-1055.60~20.04.1 5.15.0-1056.61~20.04.1 5.15.0-1057.63~20.04.1 5.15.0-1058.64~20.04.1 5.15.0-1061.67~20.04.1 5.15.0-1062.68~20.04.1 5.15.0-1063.69~20.04.1 5.15.0-1064.70~20.04.1 5.15.0-1065.71~20.04.1 5.15.0-1066.72~20.04.1 5.15.0-1067.73~20.04.1 5.15.0-1068.74~20.04.1 5.15.0-1069.75~20.04.1 5.15.0-1070.76~20.04.1 5.15.0-1071.77~20.04.1 5.15.0-1072.78~20.04.1 5.15.0-1073.79~20.04.1 5.15.0-1075.82~20.04.1 5.15.0-1077.84~20.04.1 5.15.0-1080.87~20.04.1 5.15.0-1081.88~20.04.1 5.15.0-1082.89~20.04.1 5.15.0-1083.90~20.04.1 5.15.0-1084.91~20.04.1
Ubuntu 20.04 HWE Azure	Released	40 kernels 5.15.0-1029.36~20.04.1 5.15.0-1022.27~20.04.1 5.15.0-1023.29~20.04.1 5.15.0-1021.26~20.04.1 5.15.0-1020.25~20.04.1 5.15.0-1017.20~20.04.1 5.15.0-1019.24~20.04.1 5.15.0-1008.9~20.04.1 5.15.0-1013.16~20.04.1 5.15.0-1014.17~20.04.1 5.15.0-1024.30~20.04.1 5.15.0-1034.41~20.04.1 5.15.0-1049.56~20.04.1 5.15.0-1050.57~20.04.1 5.15.0-1054.62~20.04.1 5.15.0-1056.64~20.04.1 5.15.0-1057.65~20.04.1 5.15.0-1058.66~20.04.2 5.15.0-1059.67~20.04.1 5.15.0-1060.69~20.04.1 5.15.0-1061.70~20.04.1 5.15.0-1063.72~20.04.1 5.15.0-1064.73~20.04.1 5.15.0-1067.76~20.04.1 5.15.0-1068.77~20.04.1 5.15.0-1065.74~20.04.1 5.15.0-1070.79~20.04.1 5.15.0-1071.80~20.04.1 5.15.0-1072.81~20.04.1 5.15.0-1073.82~20.04.1 5.15.0-1074.83~20.04.1 5.15.0-1075.84~20.04.1 5.15.0-1078.87~20.04.1 5.15.0-1079.88~20.04.1 5.15.0-1081.90~20.04.1 5.15.0-1082.91~20.04.1 5.15.0-1086.95~20.04.1 5.15.0-1087.96~20.04.1 5.15.0-1088.97~20.04.1 5.15.0-1089.98~20.04.1
Ubuntu 22.04	Released	85 kernels 5.15.0-27.28 5.15.0-33.34 5.15.0-37.39 5.15.0-39.42 5.15.0-25.25 5.15.0-28.29 5.15.0-29.30 5.15.0-30.31 5.15.0-41.44 5.15.0-43.46 5.15.0-46.49 5.15.0-35.36 5.15.0-47.51 5.15.0-48.54 5.15.0-40.43 5.15.0-50.56 5.15.0-52.58 5.15.0-53.59 5.15.0-56.62 5.15.0-54.60 5.15.0-57.63 5.15.0-58.64 5.15.0-60.66 5.15.0-67.74 5.15.0-69.76 5.15.0-70.77 5.15.0-71.78 5.15.0-72.79 5.15.0-68.75 5.15.0-73.80 5.15.0-75.82 5.15.0-76.83 5.15.0-78.85 5.15.0-79.86 5.15.0-82.91 5.15.0-83.92 5.15.0-84.93 5.15.0-86.96 5.15.0-74.81 5.15.0-87.97 5.15.0-88.98 5.15.0-89.99 5.15.0-91.101 5.15.0-92.102 5.15.0-94.104 5.15.0-97.107 5.15.0-100.110 5.15.0-101.111 5.15.0-102.112 5.15.0-105.115 5.15.0-106.116 5.15.0-107.117 5.15.0-112.122 5.15.0-113.123 5.15.0-116.126 5.15.0-117.127 5.15.0-118.128 5.15.0-119.129 5.15.0-121.131 5.15.0-122.132 5.15.0-124.134 5.15.0-125.135 5.15.0-127.137 5.15.0-130.140 5.15.0-126.136 5.15.0-131.141 5.15.0-128.138 5.15.0-133.144 5.15.0-134.145 5.15.0-135.146 5.15.0-136.147 5.15.0-138.148 5.15.0-139.149 5.15.0-140.150 5.15.0-141.151 5.15.0-142.152 5.15.0-143.153 5.15.0-144.157 5.15.0-151.161 5.15.0-152.162 5.15.0-153.163 5.15.0-156.166 5.15.0-157.167 5.15.0-160.170 5.15.0-161.171
Ubuntu 22.04 AWS	Released	76 kernels 5.15.0-1005.7 5.15.0-1008.10 5.15.0-1011.14 5.15.0-1013.17 5.15.0-1015.19 5.15.0-1017.21 5.15.0-1009.11 5.15.0-1020.24 5.15.0-1021.25 5.15.0-1022.26 5.15.0-1023.27 5.15.0-1026.30 5.15.0-1004.6 5.15.0-1014.18 5.15.0-1018.22 5.15.0-1024.29 5.15.0-1027.31 5.15.0-1028.32 5.15.0-1030.34 5.15.0-1031.35 5.15.0-1033.37 5.15.0-1034.38 5.15.0-1035.39 5.15.0-1036.40 5.15.0-1032.36 5.15.0-1037.41 5.15.0-1038.43 5.15.0-1039.44 5.15.0-1040.45 5.15.0-1042.47 5.15.0-1043.48 5.15.0-1044.49 5.15.0-1045.50 5.15.0-1047.52 5.15.0-1048.53 5.15.0-1049.54 5.15.0-1050.55 5.15.0-1051.56 5.15.0-1052.57 5.15.0-1053.58 5.15.0-1055.60 5.15.0-1056.61 5.15.0-1057.63 5.15.0-1060.66 5.15.0-1061.67 5.15.0-1062.68 5.15.0-1063.69 5.15.0-1064.70 5.15.0-1065.71 5.15.0-1066.72 5.15.0-1067.73 5.15.0-1068.74 5.15.0-1069.75 5.15.0-1070.76 5.15.0-1071.77 5.15.0-1072.78 5.15.0-1073.79 5.15.0-1076.83 5.15.0-1078.85 5.15.0-1079.86 5.15.0-1080.87 5.15.0-1081.88 5.15.0-1082.89 5.15.0-1083.90 5.15.0-1084.91 5.15.0-1085.92 5.15.0-1086.93 5.15.0-1087.94 5.15.0-1088.95 5.15.0-1089.96 5.15.0-1090.97 5.15.0-1091.98 5.15.0-1092.99 5.15.0-1093.100 5.15.0-1095.102 5.15.0-1096.103
Ubuntu 22.04 Azure	Released	70 kernels 5.15.0-1005.6 5.15.0-1007.8 5.15.0-1010.12 5.15.0-1012.15 5.15.0-1014.17 5.15.0-1017.20 5.15.0-1008.9 5.15.0-1019.24 5.15.0-1020.25 5.15.0-1021.26 5.15.0-1022.27 5.15.0-1003.4 5.15.0-1013.16 5.15.0-1023.29 5.15.0-1029.36 5.15.0-1024.30 5.15.0-1034.41 5.15.0-1035.42 5.15.0-1036.43 5.15.0-1037.44 5.15.0-1038.45 5.15.0-1039.46 5.15.0-1040.47 5.15.0-1041.48 5.15.0-1042.49 5.15.0-1045.52 5.15.0-1046.53 5.15.0-1047.54 5.15.0-1049.56 5.15.0-1044.51 5.15.0-1050.57 5.15.0-1051.59 5.15.0-1052.60 5.15.0-1053.61 5.15.0-1054.62 5.15.0-1056.64 5.15.0-1057.65 5.15.0-1058.66 5.15.0-1059.67 5.15.0-1060.69 5.15.0-1061.70 5.15.0-1063.72 5.15.0-1064.73 5.15.0-1066.75 5.15.0-1067.76 5.15.0-1068.77 5.15.0-1070.79 5.15.0-1071.80 5.15.0-1072.81 5.15.0-1073.82 5.15.0-1074.83 5.15.0-1075.84 5.15.0-1078.87 5.15.0-1079.88 5.15.0-1081.90 5.15.0-1082.91 5.15.0-1084.93 5.15.0-1086.95 5.15.0-1087.96 5.15.0-1088.97 5.15.0-1089.98 5.15.0-1090.99 5.15.0-1091.100 5.15.0-1092.101 5.15.0-1094.103 5.15.0-1095.104 5.15.0-1096.105 5.15.0-1097.106 5.15.0-1098.107 5.15.0-1099.108
Ubuntu 24.04	In Rollout	37 kernels 6.8.0-35.35 6.8.0-38.38 6.8.0-36.36 6.8.0-39.39 6.8.0-40.40 6.8.0-41.41 6.8.0-44.44 6.8.0-45.45 6.8.0-31.31 6.8.0-47.47 6.8.0-48.48 6.8.0-49.49 6.8.0-50.51 6.8.0-51.52 6.8.0-52.53 6.8.0-54.56 6.8.0-55.57 6.8.0-53.55 6.8.0-56.58 6.8.0-57.59 6.8.0-58.60 6.8.0-59.61 6.8.0-60.63 6.8.0-62.65 6.8.0-63.66 6.8.0-64.67 6.8.0-71.71 6.8.0-78.78 6.8.0-79.79 6.8.0-84.84 6.8.0-85.85 6.8.0-83.83 6.8.0-86.87 6.8.0-87.88 6.8.0-88.89 6.8.0-90.91 6.8.0-94.96

Release info

Copy page link

Open as a page

Advisory

CLSA-2025:1748945064

Operating system

CentOS 8.4 ELS

Published date

Nov 16, 2014

Project

Linux

Version

2.11.0-1~ubuntu16.04.1+tuxcare.els12

How to fix

Update command:

apt-get update
apt-get --only-upgrade install ansible*

Changelog

Insufficiently Random Passwords Leakage
Debian/patches/CVE-2020-10729.patch: Fix caching of Jinja2 expressions to prevent caching dynamic results
CVE-2020-10729

Updated packages

ansible_2.5.1+dfsg-1ubuntu0.1+tuxcare.els6_all.deb

CVE-2025-38528

Severity

Details

Overview

About vulnerability

Details

Statement

Fixes

Statement

KernelCare state

Subscribe to updates

Unsubscribe

Contact us

Message Delivered!