CVE-2025-38528 | Linux Kernel up to 6.1.146/6.6.99/6.12.39/6.15.7 bpf lib/vsprintf.c bpf_trace_printk fmt[] format string

A vulnerability described as critical has been identified in Linux Kernel up to 6.1.146/6.6.99/6.12.39/6.15.7. Affected by this vulnerability is the function bpf_trace_printk in the library lib/vsprintf.c of the component bpf. The manipulation of the argument fmt[] leads to format string.

This vulnerability is known as CVE-2025-38528. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.