SECUFOCUSNOW
Home›CVE index›CVE-2025-38375
Review reviewHigh

CVE-2025-38375

Linux Linux, linux kernel, debian linux

In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_page, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.

CVSS
7.8
EPSS
0.17%
6.91% percentile
CISA KEV
Not listed
Published
2025.07.25
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.17%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_page, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.

Affected product and versions

Product
Linux Linux, linux kernel, debian linux
Affected versions
>= 4941d472bf95b4345d6e38906fcf354e74afa311 < 773e95c268b5d859f51f7547559734fd2a57660c, >= 4941d472bf95b4345d6e38906fcf354e74afa311 < ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1, >= 4941d472bf95b4345d6e38906fcf354e74afa311 < 982beb7582c193544eb9c6083937ec5ac1c9d651, >= 4941d472bf95b4345d6e38906fcf354e74afa311 < 6aca3dad2145e864dfe4d1060f45eb1bac75dd58, >= 4941d472bf95b4345d6e38906fcf354e74afa311 < 80b971be4c37a4d23a7f1abc5ff33dc7733d649b, >= 4941d472bf95b4345d6e38906fcf354e74afa311 < bc68bc3563344ccdc57d1961457cdeecab8f81ef, >= 4941d472bf95b4345d6e38906fcf354e74afa311 < 11f2d0e8be2b5e784ac45fa3da226492c3e506d8, >= 4941d472bf95b4345d6e38906fcf354e74afa311 < 315dbdd7cdf6aa533829774caaf4d25f1fd20e73, >= 4.14, >= 4.14 < 5.4.297, >= 5.5 < 5.10.241, >= 5.11 < 5.15.189, >= 5.16 < 6.1.144, >= 6.2 < 6.6.97, >= 6.7 < 6.12.37, >= 6.13 < 6.15.6, 6.16, 11.0
Fixed versions
5.4.297, 5.10.241, 5.15.189, 6.1.144, 6.6.97, 6.12.37, 6.15.6

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel, debian linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-125