cve 2025 38166

CVE-2025-38166 is a Linux kernel vulnerability described as a BPF fix for a kTLS panic with sockmap, which can cause a kernel panic (OOPS) under specific conditions. While Microsoft's advisory states that Azure Linux includes the affected open-source library and is potentially impacted, this does not confirm that Azure Linux is the only Microsoft product affected. The vulnerability involves interactions between BPF sockmap and kernel TLS (kTLS), and discussions on WindowsForum highlight the scope of the issue across Linux environments, including WSL2. Users tracking this CVE should monitor official advisories for updates on affected products and patches.