Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-38375

virtio-net: ensure the received length does not exceed allocated size

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_page, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4941d472bf95b4345d6e38906fcf354e74afa311 to < 773e95c268b5d859f51f7547559734fd2a57660caffected
  • 4941d472bf95b4345d6e38906fcf354e74afa311 to < ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1affected
  • 4941d472bf95b4345d6e38906fcf354e74afa311 to < 982beb7582c193544eb9c6083937ec5ac1c9d651affected
  • 4941d472bf95b4345d6e38906fcf354e74afa311 to < 6aca3dad2145e864dfe4d1060f45eb1bac75dd58affected
  • 4941d472bf95b4345d6e38906fcf354e74afa311 to < 80b971be4c37a4d23a7f1abc5ff33dc7733d649baffected
  • 4941d472bf95b4345d6e38906fcf354e74afa311 to < bc68bc3563344ccdc57d1961457cdeecab8f81efaffected
  • 4941d472bf95b4345d6e38906fcf354e74afa311 to < 11f2d0e8be2b5e784ac45fa3da226492c3e506d8affected
  • 4941d472bf95b4345d6e38906fcf354e74afa311 to < 315dbdd7cdf6aa533829774caaf4d25f1fd20e73affected

Linux Linux

Default version status: affected

  • 4.14affected
  • 0 to < 4.14unaffected
  • 5.4.297 to ≤ 5.4.*unaffected
  • 5.10.241 to ≤ 5.10.*unaffected
  • 5.15.189 to ≤ 5.15.*unaffected
  • 6.1.144 to ≤ 6.1.*unaffected
  • 6.6.97 to ≤ 6.6.*unaffected
  • 6.12.37 to ≤ 6.12.*unaffected
  • 6.15.6 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References