{
  "affected": [],
  "aliases": [
    "CVE-2025-38611"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-08-19T17:15:39Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvmci: Prevent the dispatching of uninitialized payloads\n\nThe reproducer executes the host\u0027s unlocked_ioctl call in two different\ntasks. When init_context fails, the struct vmci_event_ctx is not fully\ninitialized when executing vmci_datagram_dispatch() to send events to all\nvm contexts. This affects the datagram taken from the datagram queue of\nits context by another task, because the datagram payload is not initialized\naccording to the size payload_size, which causes the kernel data to leak\nto the user space.\n\nBefore dispatching the datagram, and before setting the payload content,\nexplicitly set the payload content to 0 to avoid data leakage caused by\nincomplete payload initialization.",
  "id": "GHSA-fg46-5p85-h39f",
  "modified": "2025-08-28T15:30:39Z",
  "published": "2025-08-19T18:31:34Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-38611"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2c86366ce37f398e20fa09e7e9dc8788fbf6cf0c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/6696a46f4ebdc7314ff23a2fb0e93a95da2c45ee"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7624fe66a0832eb6fe4e465fcdd4f9104fb9b339"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/87f8f8654e55cf9327cc63746595085a041699dc"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/94112b0d443e0b6b5bb17854f97c1498064cc9ed"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/a85dc83857497fa1f68a9b23e7213949d4cb51ea"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/b097d921efb5bb150066365287ff046b8c8b29f5"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/bfb4cf9fb97e4063f0aa62e9e398025fb6625031"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/bfd6b211fe8aae79acbedd19e8d5bea5d062a41b"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}