{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"1fe27f97944017a9d3c5af4d6d95282bff0f1147","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"},{"lessThan":"4abccfb61f422300be014b8e734c63344306f009","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"},{"lessThan":"80417057ac60dd80f4816eb426e4e4a5bf696534","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"},{"lessThan":"df524a68d9021c1401965d610bb6e42ee5d9611e","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"},{"lessThan":"0ab3de047808f375a36cd345225572eb3366f3c6","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"},{"lessThan":"d2768016f091f8a5264076b433fd7c3fabb6eb97","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"},{"lessThan":"b85e3367a5716ed3662a4fe266525190d2af76df","status":"affected","version":"3c4287f62044a90e73a561aa05fc46e62da173da","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.250","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.200","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.163","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.124","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.35","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.7","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.7","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.5","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.7","versionType":"custom"}]}],"cveId":"CVE-2025-38201","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX\n\nOtherwise, it is possible to hit WARN_ON_ONCE in __kvmalloc_node_noprof()\nwhen resizing hashtable because __GFP_NOWARN is unset.\n\nSimilar to:\n\n  b541ba7d1f5a (\"netfilter: conntrack: clamp maximum hashtable size to INT_MAX\")","epss":{"date":"2026-11-05","percentile":0.14573,"score":0.00235},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793911940308,"publishedAt":1751636242732,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/1fe27f97944017a9d3c5af4d6d95282bff0f1147"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/4abccfb61f422300be014b8e734c63344306f009"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/80417057ac60dd80f4816eb426e4e4a5bf696534"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/df524a68d9021c1401965d610bb6e42ee5d9611e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0ab3de047808f375a36cd345225572eb3366f3c6"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d2768016f091f8a5264076b433fd7c3fabb6eb97"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/b85e3367a5716ed3662a4fe266525190d2af76df"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html"}],"remediation":[],"revision":"628b8d47b04dbc18a838576f19de39004028b02ff0f6ddbdb8b94ec84b2c56fe","sources":[{"modifiedAt":1793911940308,"name":"CNA: Linux","retrievedAt":1793913612318,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38201"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913636453,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38201"}],"ssvc":{"assessedAt":1793911875766,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX","updatedAt":1793913636453}