CVE-2025-38375

Summary

In the Linux kernel, the following vulnerability has been resolved:

virtio-net: ensure the received length does not exceed allocated size

In xdp_linearize_page, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4941d472bf95b4345d6e38906fcf354e74afa311 < 773e95c268b5d859f51f7547559734fd2a57660caffected
LinuxLinux4941d472bf95b4345d6e38906fcf354e74afa311 < ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1affected
LinuxLinux4941d472bf95b4345d6e38906fcf354e74afa311 < 982beb7582c193544eb9c6083937ec5ac1c9d651affected
LinuxLinux4941d472bf95b4345d6e38906fcf354e74afa311 < 6aca3dad2145e864dfe4d1060f45eb1bac75dd58affected
LinuxLinux4941d472bf95b4345d6e38906fcf354e74afa311 < 80b971be4c37a4d23a7f1abc5ff33dc7733d649baffected
LinuxLinux4941d472bf95b4345d6e38906fcf354e74afa311 < bc68bc3563344ccdc57d1961457cdeecab8f81efaffected
LinuxLinux4941d472bf95b4345d6e38906fcf354e74afa311 < 11f2d0e8be2b5e784ac45fa3da226492c3e506d8affected
LinuxLinux4941d472bf95b4345d6e38906fcf354e74afa311 < 315dbdd7cdf6aa533829774caaf4d25f1fd20e73affected
LinuxLinux4.14affected
LinuxLinux0 < 4.14unaffected
LinuxLinux5.4.297 <= 5.4.*unaffected
LinuxLinux5.10.241 <= 5.10.*unaffected
LinuxLinux5.15.189 <= 5.15.*unaffected
LinuxLinux6.1.144 <= 6.1.*unaffected
LinuxLinux6.6.97 <= 6.6.*unaffected
LinuxLinux6.12.37 <= 6.12.*unaffected
LinuxLinux6.15.6 <= 6.15.*unaffected
LinuxLinux6.16 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References