Review reviewHigh

CVE-2025-38570

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: unlink NAPIs from queues on error to open CI hit a UaF in fbnic in the AF_XDP portion of the queues.py test. The UaF is in the __sk_mark_napi_id_once() call in xsk_bind(), NAPI has been freed. Looks like the device failed to open earlier, and we lack clearing the NAPI pointer from the queue.

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2025.08.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 557d02238e05eb66b9aba9a1f90f3a2131c6c887 < 21d3f8441c7f317b93ba6a8029610c8b7e3773db, >= 557d02238e05eb66b9aba9a1f90f3a2131c6c887 < 4b59f9deff3bdb52b223c85048f1d2924803b817, >= 557d02238e05eb66b9aba9a1f90f3a2131c6c887 < 4b31bcb025cb497da2b01f87173108ff32d350d2, >= 6.14, >= 6.14 < 6.15.10, >= 6.16 < 6.16.1
Fixed versions: 6.15.10, 6.16.1

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-416