CVE-2025-38639

CVE-2025-38639 affects the Linux kernel netfilter xt_nfacct component. The issue is triggered by assuming the acct name is null-terminated, which can enable out-of-bounds reads. Multiple advisories note this is resolved by upgrading kernel versions; for example, Mariner/Mariner-like reports indic...

CVE-2024-50259 netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()

In the Linux kernel, the following vulnerability has been resolved: netdevsim: Add trailing zero to terminate the string in nsimnexthopbucketactivitywrite This was found by a static analyzer. We should not forget the trailing zero after copyfromuser if we will further do some string operations,...