CVE-2025-38201

netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX

References

Notes

 carnil> Vulnerable versions: 5.6.

Bugs

Status

Branch Status
upstream released (6.16-rc1) [b85e3367a5716ed3662a4fe266525190d2af76df]
6.19-upstream-stable N/A "Fixed before branching point"
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.15-upstream-stable released (6.15.4) [d2768016f091f8a5264076b433fd7c3fabb6eb97]
6.12-upstream-stable released (6.12.35) [0ab3de047808f375a36cd345225572eb3366f3c6]
6.6-upstream-stable released (6.6.124) [df524a68d9021c1401965d610bb6e42ee5d9611e]
6.1-upstream-stable released (6.1.163) [80417057ac60dd80f4816eb426e4e4a5bf696534]
5.10-upstream-stable released (5.10.250) [1fe27f97944017a9d3c5af4d6d95282bff0f1147]
sid released (6.12.35-1)
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security needed
5.10-bullseye-security needed