Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-39897

net: xilinx: axienet: Add error handling for RX metadata pointer retrieval

Description

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaengine_desc_get_metadata_ptr() which can return an error pointer and lead to potential crashes or undefined behaviour if the pointer retrieval fails. Properly handle the error by unmapping DMA buffer, freeing the skb and returning early to prevent further processing with invalid data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6a91b846af85a24241decd686269e8e038eb13d1 to < d0ecda6fdd840b406df6617b003b036f65dd8926affected
  • 6a91b846af85a24241decd686269e8e038eb13d1 to < 92e2fc92bc4eb2bc0e84404316fbc02ddd0a3196affected
  • 6a91b846af85a24241decd686269e8e038eb13d1 to < 8bbceba7dc5090c00105e006ce28d1292cfda8ddaffected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.46 to ≤ 6.12.*unaffected
  • 6.16.6 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References