CVE-2025-38375 Details
Description
In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_page, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.
A vulnerability in the Linux kernel's virtio-net component can lead to an out-of-bounds read. This issue arises in the xdp_linearize_page function, where the length of received data is not properly checked against the allocated buffer size. The oversight can cause unauthorized memory access. The vulnerability has been addressed by implementing the necessary length verification.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/11f2d0e8be2b5e784ac45fa3da226492c3e506d8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/315dbdd7cdf6aa533829774caaf4d25f1fd20e73 | kernel.org | Patch |
| https://git.kernel.org/stable/c/6aca3dad2145e864dfe4d1060f45eb1bac75dd58 | kernel.org | Patch |
| https://git.kernel.org/stable/c/773e95c268b5d859f51f7547559734fd2a57660c | kernel.org | Patch |
| https://git.kernel.org/stable/c/80b971be4c37a4d23a7f1abc5ff33dc7733d649b | kernel.org | Patch |
| https://git.kernel.org/stable/c/982beb7582c193544eb9c6083937ec5ac1c9d651 | kernel.org | Patch |
| https://git.kernel.org/stable/c/bc68bc3563344ccdc57d1961457cdeecab8f81ef | kernel.org | Patch |
| https://git.kernel.org/stable/c/ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1 | kernel.org | Patch |
| https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html | CVE | Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html | CVE | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.14, < 5.4.297 >= 5.5, < 5.10.241 >= 5.11, < 5.15.189 >= 5.16, < 6.1.144 >= 6.2, < 6.6.97 >= 6.7, < 6.12.37 >= 6.13, < 6.15.6 6.16 rc1 6.16 rc2 6.16 rc3 6.16 rc4 |
CPE
Remediation
| |
| debian debian linux | 11.0 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 30, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 16, 2025 | Initial Analysis | [email protected] |
| Nov 3, 2025 | CVE Modified | CVE |
| Aug 28, 2025 | CVE Modified | kernel.org |
| Jul 25, 2025 | New CVE Received | kernel.org |