CVE-2025-39990 Details
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in get_helper_proto kernel test robot reported verifier bug [1] where the helper func pointer could be NULL due to disabled config option. As Alexei suggested we could check on that in get_helper_proto directly. Marking tail_call helper func with BPF_PTR_POISON, because it is unused by design. [1] https://lore.kernel.org/oe-lkp/[email protected]
A vulnerability in the Linux kernel's BPF (Berkeley Packet Filter) subsystem has been addressed. The issue arose in the BPF verifier, where a helper function pointer could be NULL due to a disabled configuration option. This vulnerability was reported by the kernel test robot. To resolve the issue, the BPF tail call helper function has been marked with a poison value, indicating it is unused by design. The vulnerability could potentially lead to incorrect verification of BPF programs, allowing for unintended behavior or exploitation.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the latest kernel version can be found on the official Linux kernel website.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 15, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/3d429cb1278e995e22995ef117fa96d223a67e93 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/6233715b4b714068d6c831d214a4e8792109875a | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/e4414b01c1cd9887bbde92f946c1ba94e40d6d64 | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 30, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 15, 2025 | New CVE Received | kernel.org |