CVE-2025-38196

CVE-2025-38196 is a vulnerability in the Linux kernel's io_uring subsystem, specifically affecting the buffer registration process. It arises when the combined offset and buffer count for cloning exceeds the maximum allowed, leading to an attempt to allocate an excessively large memory block and triggering a kernel warning. This vulnerability is rated Medium severity (CVSS 5.5), with a local attack vector and low attack complexity, potentially leading to high availability impact (system instability or denial of service) due to the large memory allocation attempt. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.