CVE-2025-38375 (GCVE-0-2025-38375)
Vulnerability from cvelistv5
Published
2025-07-25 12:53
Modified
2025-08-28 14:43
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_page, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/11f2d0e8be2b5e784ac45fa3da226492c3e506d8
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/315dbdd7cdf6aa533829774caaf4d25f1fd20e73
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6aca3dad2145e864dfe4d1060f45eb1bac75dd58
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/773e95c268b5d859f51f7547559734fd2a57660c
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/80b971be4c37a4d23a7f1abc5ff33dc7733d649b
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/982beb7582c193544eb9c6083937ec5ac1c9d651
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bc68bc3563344ccdc57d1961457cdeecab8f81ef
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1
Impacted products
Vendor Product Version
Linux Linux Version: 4941d472bf95b4345d6e38906fcf354e74afa311
Version: 4941d472bf95b4345d6e38906fcf354e74afa311
Version: 4941d472bf95b4345d6e38906fcf354e74afa311
Version: 4941d472bf95b4345d6e38906fcf354e74afa311
Version: 4941d472bf95b4345d6e38906fcf354e74afa311
Version: 4941d472bf95b4345d6e38906fcf354e74afa311
Version: 4941d472bf95b4345d6e38906fcf354e74afa311
Version: 4941d472bf95b4345d6e38906fcf354e74afa311
 Create a notification for this product.
   Linux Linux Version: 4.14
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/virtio_net.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "773e95c268b5d859f51f7547559734fd2a57660c",
              "status": "affected",
              "version": "4941d472bf95b4345d6e38906fcf354e74afa311",
              "versionType": "git"
            },
            {
              "lessThan": "ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1",
              "status": "affected",
              "version": "4941d472bf95b4345d6e38906fcf354e74afa311",
              "versionType": "git"
            },
            {
              "lessThan": "982beb7582c193544eb9c6083937ec5ac1c9d651",
              "status": "affected",
              "version": "4941d472bf95b4345d6e38906fcf354e74afa311",
              "versionType": "git"
            },
            {
              "lessThan": "6aca3dad2145e864dfe4d1060f45eb1bac75dd58",
              "status": "affected",
              "version": "4941d472bf95b4345d6e38906fcf354e74afa311",
              "versionType": "git"
            },
            {
              "lessThan": "80b971be4c37a4d23a7f1abc5ff33dc7733d649b",
              "status": "affected",
              "version": "4941d472bf95b4345d6e38906fcf354e74afa311",
              "versionType": "git"
            },
            {
              "lessThan": "bc68bc3563344ccdc57d1961457cdeecab8f81ef",
              "status": "affected",
              "version": "4941d472bf95b4345d6e38906fcf354e74afa311",
              "versionType": "git"
            },
            {
              "lessThan": "11f2d0e8be2b5e784ac45fa3da226492c3e506d8",
              "status": "affected",
              "version": "4941d472bf95b4345d6e38906fcf354e74afa311",
              "versionType": "git"
            },
            {
              "lessThan": "315dbdd7cdf6aa533829774caaf4d25f1fd20e73",
              "status": "affected",
              "version": "4941d472bf95b4345d6e38906fcf354e74afa311",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/virtio_net.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.14"
            },
            {
              "lessThan": "4.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.297",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.241",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.189",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.144",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.37",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.15.*",
              "status": "unaffected",
              "version": "6.15.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.297",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.241",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.189",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.144",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.97",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.37",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15.6",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-net: ensure the received length does not exceed allocated size\n\nIn xdp_linearize_page, when reading the following buffers from the ring,\nwe forget to check the received length with the true allocate size. This\ncan lead to an out-of-bound read. This commit adds that missing check."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-28T14:43:06.603Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/773e95c268b5d859f51f7547559734fd2a57660c"
        },
        {
          "url": "https://git.kernel.org/stable/c/ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1"
        },
        {
          "url": "https://git.kernel.org/stable/c/982beb7582c193544eb9c6083937ec5ac1c9d651"
        },
        {
          "url": "https://git.kernel.org/stable/c/6aca3dad2145e864dfe4d1060f45eb1bac75dd58"
        },
        {
          "url": "https://git.kernel.org/stable/c/80b971be4c37a4d23a7f1abc5ff33dc7733d649b"
        },
        {
          "url": "https://git.kernel.org/stable/c/bc68bc3563344ccdc57d1961457cdeecab8f81ef"
        },
        {
          "url": "https://git.kernel.org/stable/c/11f2d0e8be2b5e784ac45fa3da226492c3e506d8"
        },
        {
          "url": "https://git.kernel.org/stable/c/315dbdd7cdf6aa533829774caaf4d25f1fd20e73"
        }
      ],
      "title": "virtio-net: ensure the received length does not exceed allocated size",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38375",
    "datePublished": "2025-07-25T12:53:17.629Z",
    "dateReserved": "2025-04-16T04:51:24.009Z",
    "dateUpdated": "2025-08-28T14:43:06.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-38375\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-07-25T13:15:26.517\",\"lastModified\":\"2025-08-28T15:15:48.893\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nvirtio-net: ensure the received length does not exceed allocated size\\n\\nIn xdp_linearize_page, when reading the following buffers from the ring,\\nwe forget to check the received length with the true allocate size. This\\ncan lead to an out-of-bound read. This commit adds that missing check.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: virtio-net: garantizar que la longitud recibida no supere el tama\u00f1o asignado. En xdp_linearize_page, al leer los siguientes b\u00faferes del anillo, se olvida verificar la longitud recibida con el tama\u00f1o asignado real. Esto puede provocar una lectura fuera de los l\u00edmites. Este commit a\u00f1ade esta verificaci\u00f3n faltante.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/11f2d0e8be2b5e784ac45fa3da226492c3e506d8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/315dbdd7cdf6aa533829774caaf4d25f1fd20e73\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6aca3dad2145e864dfe4d1060f45eb1bac75dd58\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/773e95c268b5d859f51f7547559734fd2a57660c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/80b971be4c37a4d23a7f1abc5ff33dc7733d649b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/982beb7582c193544eb9c6083937ec5ac1c9d651\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/bc68bc3563344ccdc57d1961457cdeecab8f81ef\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.