CVE-2025-38201

netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX

References

Notes

 carnil> Vulnerable versions: 5.6.

Bugs

Status

Branch Status
upstream released (6.16-rc1) [b85e3367a5716ed3662a4fe266525190d2af76df]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.15-upstream-stable released (6.15.4) [d2768016f091f8a5264076b433fd7c3fabb6eb97]
6.12-upstream-stable released (6.12.35) [0ab3de047808f375a36cd345225572eb3366f3c6]
6.6-upstream-stable needed
6.1-upstream-stable needed
5.10-upstream-stable needed
sid released (6.12.35-1)
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security needed
5.10-bullseye-security needed