CVE-2025-39990

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-39990
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39990.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-39990
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
openSUSE (1)
ROOT (5)
SUSE (4)
UBUNTU (1)
Related
openSUSE (1)
SUSE (4)
Published
2025-10-15T07:56:07Z
Modified
2026-10-22T02:48:45Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
bpf: Check the helper function is valid in get_helper_proto
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf: Check the helper function is valid in get_helper_proto

kernel test robot reported verifier bug [1] where the helper func pointer could be NULL due to disabled config option.

As Alexei suggested we could check on that in get_helper_proto directly. Marking tail_call helper func with BPF_PTR_POISON, because it is unused by design.

[1] https://lore.kernel.org/oe-lkp/202507160818.68358831-lkp@intel.com

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39990.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f470378c7562a2818b45ed11c98973f2b89eedd3
Fixed
dfbff47f120e4b0793ca0e0b8660361ccac25a74
Fixed
3d429cb1278e995e22995ef117fa96d223a67e93
Fixed
6233715b4b714068d6c831d214a4e8792109875a
Fixed
e4414b01c1cd9887bbde92f946c1ba94e40d6d64

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39990.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.8.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.50
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.16.10

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39990.json"