{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"2f8c69a72e8ad87b36b8052f789da3cc2b2e186c","status":"affected","version":"07343110b293456d30393e89b86c4dee1ac051c8","versionType":"git"},{"lessThan":"7bf4461f1c97207fda757014690d55a447ce859f","status":"affected","version":"07343110b293456d30393e89b86c4dee1ac051c8","versionType":"git"},{"lessThan":"2d834477bbc1e8b8a59ff8b0c081529d6bed7b22","status":"affected","version":"07343110b293456d30393e89b86c4dee1ac051c8","versionType":"git"},{"lessThan":"b522d4d334f206284b1a44b0b0b2f99fd443b39b","status":"affected","version":"07343110b293456d30393e89b86c4dee1ac051c8","versionType":"git"},{"lessThan":"d4965578267e2e81f67c86e2608481e77e9c8569","status":"affected","version":"07343110b293456d30393e89b86c4dee1ac051c8","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.19"},{"lessThan":"5.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.142","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.95","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.35","versionType":"semver"},{"lessThanOrEqual":"6.15.*","status":"unaffected","version":"6.15.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.16","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2025-38202","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()\n\nbpf_map_lookup_percpu_elem() helper is also available for sleepable bpf\nprogram. When BPF JIT is disabled or under 32-bit host,\nbpf_map_lookup_percpu_elem() will not be inlined. Using it in a\nsleepable bpf program will trigger the warning in\nbpf_map_lookup_percpu_elem(), because the bpf program only holds\nrcu_read_lock_trace lock. Therefore, add the missed check.","epss":{"date":"2026-11-05","percentile":0.07625,"score":0.0018},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793911940508,"publishedAt":1751636243347,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/2f8c69a72e8ad87b36b8052f789da3cc2b2e186c"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7bf4461f1c97207fda757014690d55a447ce859f"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/2d834477bbc1e8b8a59ff8b0c081529d6bed7b22"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/b522d4d334f206284b1a44b0b0b2f99fd443b39b"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d4965578267e2e81f67c86e2608481e77e9c8569"},{"source":"ADP: CVE","tags":[],"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"}],"remediation":[],"revision":"9c2a1e03fdba224c667e79f1630e213b764f92c79b4de161546016f9184577d2","sources":[{"modifiedAt":1793911940508,"name":"CNA: Linux","retrievedAt":1793913613601,"url":"https://www.cve.org/CVERecord?id=CVE-2025-38202"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793913636251,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-38202"}],"ssvc":{"assessedAt":1793911880798,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()","updatedAt":1793913636251}