CVE-2025-21855: ibmvnic: Don't reference skb after sending to VIOS

Q: What is the severity of CVE-2025-21855?

CVE-2025-21855 is considered a moderate severity vulnerability in the Linux kernel.

Q: How does CVE-2025-21855 affect the Linux kernel?

CVE-2025-21855 affects the Linux kernel by improperly referencing socket buffers after they've been sent to the Virtual I/O Server (VIOS).

Q: How can I mitigate CVE-2025-21855?

Mitigation for CVE-2025-21855 involves applying the relevant patches provided in the latest Linux kernel updates.

Q: Is CVE-2025-21855 related to network performance issues?

Yes, CVE-2025-21855 may lead to potential network performance issues due to the mishandling of transmitted socket buffers.

Q: What versions of the Linux kernel are impacted by CVE-2025-21855?

CVE-2025-21855 impacts multiple versions of the Linux kernel, so it is advisable to check the specific version release notes for details.

Published Mar 12, 2025

Updated

ibmvnic: Don't reference skb after sending to VIOS

Affected Software

220 affected componentsFixes available

Linux Kernel

IBM Verify Identity Access<=11.0 - 11.0.2

IBM Security Verify Access<=10.0 - 10.0.9.1

IBM Verify Identity Access Container<=11.0 - 11.0.2

IBM Security Verify Access Container<=10.0 - 10.0.9.1

Linux Linux kernel>=4.5<6.1.130

Linux Linux kernel>=6.2<6.6.80

Linux Linux kernel>=6.7<6.12.17

Linux Linux kernel>=6.13<6.13.5

Linux Linux kernel=6.14-rc1

Linux Linux kernel=6.14-rc2

Linux Linux kernel=6.14-rc3

ubuntu/linux-aws<4.4.0-1150.156

4.4.0-1150.156

ubuntu/linux-azure<4.15.0-1195.210~14.04.1

4.15.0-1195.210~14.04.1

ubuntu/linux-lts-xenial<4.4.0-276.310~14.04.1

4.4.0-276.310~14.04.1

ubuntu/linux<4.4.0-276.310

4.4.0-276.310

ubuntu/linux-aws<4.4.0-1188.203

4.4.0-1188.203

ubuntu/linux-aws-hwe<4.15.0-1187.200~16.04.1

4.15.0-1187.200~16.04.1

ubuntu/linux-azure<4.15.0-1195.210~16.04.1

4.15.0-1195.210~16.04.1

ubuntu/linux-gcp<4.15.0-1180.197~16.04.1

4.15.0-1180.197~16.04.1

ubuntu/linux-hwe<4.15.0-245.257~16.04.1

4.15.0-245.257~16.04.1

ubuntu/linux-kvm<4.4.0-1151.162

4.4.0-1151.162

ubuntu/linux-oracle<4.15.0-1149.160~16.04.1

4.15.0-1149.160~16.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-fips<4.4.0-1120.127

4.4.0-1120.127

ubuntu/linux-fips*

ubuntu/linux<4.15.0-245.257

4.15.0-245.257

ubuntu/linux-aws<4.15.0-1187.200

4.15.0-1187.200

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4<5.4.0-1153.163~18.04.1

5.4.0-1153.163~18.04.1

ubuntu/linux-azure*

ubuntu/linux-azure-4.15<4.15.0-1195.210

4.15.0-1195.210

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4<5.4.0-1156.163~18.04.1

5.4.0-1156.163~18.04.1

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15<4.15.0-1180.197

4.15.0-1180.197

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4<5.4.0-1156.165~18.04.1

5.4.0-1156.165~18.04.1

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4<5.4.0-224.244~18.04.1

5.4.0-224.244~18.04.1

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4<5.4.0-1099.104~18.04.1

5.4.0-1099.104~18.04.1

ubuntu/linux-kvm<4.15.0-1169.174

4.15.0-1169.174

ubuntu/linux-oem*

ubuntu/linux-oracle<4.15.0-1149.160

4.15.0-1149.160

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4<5.4.0-1151.161~18.04.1

5.4.0-1151.161~18.04.1

ubuntu/linux-raspi-5.4<5.4.0-1136.149~18.04.1

5.4.0-1136.149~18.04.1

ubuntu/linux-aws-fips<4.15.0-2125.131

4.15.0-2125.131

ubuntu/linux-azure-fips<4.15.0-2104.110

4.15.0-2104.110

ubuntu/linux-fips<4.15.0-1142.154

4.15.0-1142.154

ubuntu/linux-gcp-fips<4.15.0-2088.94

4.15.0-2088.94

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.4.0-224.244

5.4.0-224.244

ubuntu/linux-aws<5.4.0-1153.163

5.4.0-1153.163

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.15<5.15.0-1098.105~20.04.1

5.15.0-1098.105~20.04.1

ubuntu/linux-aws-5.8*

ubuntu/linux-azure<5.4.0-1156.163

5.4.0-1156.163

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.15<5.15.0-1102.111~20.04.1

5.15.0-1102.111~20.04.1

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-bluefield<5.4.0-1112.119

5.4.0-1112.119

ubuntu/linux-gcp<5.4.0-1156.165

5.4.0-1156.165

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.15<5.15.0-1098.107~20.04.1

5.15.0-1098.107~20.04.1

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.15<5.15.0-164.174~20.04.1

5.15.0-164.174~20.04.1

ubuntu/linux-hwe-5.8*

ubuntu/linux-ibm<5.4.0-1099.104

5.4.0-1099.104

ubuntu/linux-ibm-5.15<5.15.0-1092.95~20.04.1

5.15.0-1092.95~20.04.1

ubuntu/linux-intel-5.13*

ubuntu/linux-intel-iotg-5.15<5.15.0-1093.99~20.04.1

5.15.0-1093.99~20.04.1

ubuntu/linux-iot<5.4.0-1057.60

5.4.0-1057.60

ubuntu/linux-kvm<5.4.0-1140.149

5.4.0-1140.149

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-164.174~20.04.1

5.15.0-164.174~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1050.50~20.04.1

5.15.0-1050.50~20.04.1

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle<5.4.0-1151.161

5.4.0-1151.161

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.15<5.15.0-1095.101~20.04.1

5.15.0-1095.101~20.04.1

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi<5.4.0-1136.149

5.4.0-1136.149

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.15<5.15.0-1093.97~20.04.2

5.15.0-1093.97~20.04.2

ubuntu/linux-riscv-5.8*

ubuntu/linux-xilinx-zynqmp<5.4.0-1071.75

5.4.0-1071.75

ubuntu/linux-aws-fips<5.4.0-1153.163+fips1

5.4.0-1153.163+fips1

ubuntu/linux-azure-fips<5.4.0-1157.164+fips1

5.4.0-1157.164+fips1

ubuntu/linux-fips<5.4.0-1127.137

5.4.0-1127.137

ubuntu/linux-gcp-fips<5.4.0-1156.165+fips1

5.4.0-1156.165+fips1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux<5.15.0-164.174

5.15.0-164.174

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1098.105

5.15.0-1098.105

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1035.37~22.04.1

6.8.0-1035.37~22.04.1

ubuntu/linux-azure<5.15.0-1102.111

5.15.0-1102.111

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1034.39~22.04.1

6.8.0-1034.39~22.04.1

ubuntu/linux-azure-fde<5.15.0-1102.111.1

5.15.0-1102.111.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1098.107

5.15.0-1098.107

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1036.38~22.04.1

6.8.0-1036.38~22.04.1

ubuntu/linux-gke<5.15.0-1094.100

5.15.0-1094.100

ubuntu/linux-gkeop<5.15.0-1081.89

5.15.0-1081.89

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-78.78~22.04.1

6.8.0-78.78~22.04.1

ubuntu/linux-ibm<5.15.0-1092.95

5.15.0-1092.95

ubuntu/linux-ibm-6.8<6.8.0-1033.33~22.04.1

6.8.0-1033.33~22.04.1

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1093.99

5.15.0-1093.99

ubuntu/linux-kvm<5.15.0-1090.95

5.15.0-1090.95

ubuntu/linux-lowlatency<5.15.0-164.174

5.15.0-164.174

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-78.78.1~22.04.1

6.8.0-78.78.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1093.94

5.15.0-1093.94

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1035.38~22.04.1

6.8.0-1035.38~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1050.50

5.15.0-1050.50

ubuntu/linux-nvidia-tegra-igx<5.15.0-1039.39

5.15.0-1039.39

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1095.101

5.15.0-1095.101

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1032.33~22.04.1

6.8.0-1032.33~22.04.1

ubuntu/linux-raspi<5.15.0-1092.95

5.15.0-1092.95

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-78.78~22.04.1

6.8.0-78.78~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1062.66

5.15.0-1062.66

ubuntu/linux-bluefield<5.15.0-1082.84

5.15.0-1082.84

ubuntu/linux-intel-iot-realtime<5.15.0-1090.92

5.15.0-1090.92

ubuntu/linux-realtime<5.15.0-1097.106

5.15.0-1097.106

ubuntu/linux-realtime-6.8<6.8.1-1030.31~22.04.1

6.8.1-1030.31~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1098.105+fips1

5.15.0-1098.105+fips1

ubuntu/linux-azure-fips<5.15.0-1102.111+fips1

5.15.0-1102.111+fips1

ubuntu/linux-fips<5.15.0-164.174+fips1

5.15.0-164.174+fips1

ubuntu/linux-gcp-fips<5.15.0-1098.107+fips1

5.15.0-1098.107+fips1

ubuntu/linux<6.8.0-78.78

6.8.0-78.78

ubuntu/linux-aws<6.8.0-1035.37

6.8.0-1035.37

ubuntu/linux-azure<6.8.0-1034.39

6.8.0-1034.39

ubuntu/linux-azure-6.11<6.11.0-1015.15~24.04.1

6.11.0-1015.15~24.04.1

ubuntu/linux-azure-nvidia<6.8.0-1022.23

6.8.0-1022.23

ubuntu/linux-gcp<6.8.0-1036.38

6.8.0-1036.38

ubuntu/linux-gcp-6.11<6.11.0-1015.15~24.04.1

6.11.0-1015.15~24.04.1

ubuntu/linux-gke<6.8.0-1032.36

6.8.0-1032.36

ubuntu/linux-gkeop<6.8.0-1019.21

6.8.0-1019.21

ubuntu/linux-hwe-6.11<6.11.0-26.26~24.04.1

6.11.0-26.26~24.04.1

ubuntu/linux-ibm<6.8.0-1033.33

6.8.0-1033.33

ubuntu/linux-intel*

ubuntu/linux-lowlatency<6.8.0-78.78.1

6.8.0-78.78.1

ubuntu/linux-lowlatency-hwe-6.11<6.11.0-1014.15~24.04.1

6.11.0-1014.15~24.04.1

ubuntu/linux-nvidia<6.8.0-1035.38

6.8.0-1035.38

ubuntu/linux-nvidia-6.11<6.11.0-1010.10

6.11.0-1010.10

ubuntu/linux-nvidia-lowlatency<6.8.0-1035.38.1

6.8.0-1035.38.1

ubuntu/linux-nvidia-tegra<6.8.0-1009.9

6.8.0-1009.9

ubuntu/linux-oem-6.11<6.11.0-1022.22

6.11.0-1022.22

ubuntu/linux-oem-6.8*

ubuntu/linux-oracle<6.8.0-1032.33

6.8.0-1032.33

ubuntu/linux-raspi<6.8.0-1035.39

6.8.0-1035.39

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-xilinx<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi-realtime<6.8.0-2028.29

6.8.0-2028.29

ubuntu/linux-realtime<6.8.1-1030.31

6.8.1-1030.31

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1150.156
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1195.210~14.04.1
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-276.310~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-276.310
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1188.203
Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1187.200~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1195.210~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1180.197~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-245.257~16.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.4.0-1151.162
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1149.160~16.04.1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.4.0-1120.127
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-245.257
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1187.200
Upgrade
Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1153.163~18.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1195.210
Upgrade
Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.163~18.04.1
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1180.197
Upgrade
Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.165~18.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-224.244~18.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1099.104~18.04.1
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1169.174
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1149.160
Upgrade
Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1151.161~18.04.1
Upgrade
Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.
Fixed in 5.4.0-1136.149~18.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2125.131
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2104.110
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1142.154
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2088.94
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.4.0-224.244
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.4.0-1153.163
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.105~20.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.163
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111~20.04.1
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.4.0-1112.119
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.165
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.107~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.4.0-1099.104
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1092.95~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.99~20.04.1
Upgrade
Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.
Fixed in 5.4.0-1057.60
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.4.0-1140.149
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.50~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.4.0-1151.161
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1095.101~20.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.4.0-1136.149
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.97~20.04.2
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.4.0-1071.75
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1153.163+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1157.164+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1127.137
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.4.0-1156.165+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.105
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1035.37~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1034.39~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.107
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1036.38~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1094.100
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.89
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1092.95
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1033.33~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.99
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1090.95
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1093.94
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1035.38~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1050.50
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.39
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1095.101
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1032.33~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1092.95
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.66
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1082.84
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1090.92
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1097.106
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1030.31~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.105+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.111+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-164.174+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1098.107+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1035.37
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1034.39
Upgrade
Upgrade ubuntu/linux-azure-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1015.15~24.04.1
Upgrade
Upgrade ubuntu/linux-azure-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.23
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1036.38
Upgrade
Upgrade ubuntu/linux-gcp-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1015.15~24.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1032.36
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1019.21
Upgrade
Upgrade ubuntu/linux-hwe-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-26.26~24.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1033.33
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1014.15~24.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1035.38
Upgrade
Upgrade ubuntu/linux-nvidia-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1010.10
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1035.38.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 6.8.0-1009.9
Upgrade
Upgrade ubuntu/linux-oem-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1022.22
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1032.33
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1035.39
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2028.29
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1030.31
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1

Event History

Mar 12, 2025

CVE Published

via MITRE·09:42 AM

Data Sourced

via MITRE·09:42 AM

DescriptionSeverity

Data Sourced

via OSV·10:15 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·10:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Data Sourced

via Red Hat·12:23 PM

DescriptionSeverityAffected Software

Apr 9, 2025

Data Sourced

via Microsoft·07:00 AM

DescriptionSeverityWeakness

Jul 8, 2026

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-4193-1

Frequently Asked Questions

What is the severity of CVE-2025-21855?

CVE-2025-21855 is considered a moderate severity vulnerability in the Linux kernel.

How does CVE-2025-21855 affect the Linux kernel?

CVE-2025-21855 affects the Linux kernel by improperly referencing socket buffers after they've been sent to the Virtual I/O Server (VIOS).

How can I mitigate CVE-2025-21855?

Mitigation for CVE-2025-21855 involves applying the relevant patches provided in the latest Linux kernel updates.

Is CVE-2025-21855 related to network performance issues?

Yes, CVE-2025-21855 may lead to potential network performance issues due to the mishandling of transmitted socket buffers.

What versions of the Linux kernel are impacted by CVE-2025-21855?

CVE-2025-21855 impacts multiple versions of the Linux kernel, so it is advisable to check the specific version release notes for details.

CVE-2025-21855: ibmvnic: Don't reference skb after sending to VIOS

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2025-21855?

How does CVE-2025-21855 affect the Linux kernel?

How can I mitigate CVE-2025-21855?

Is CVE-2025-21855 related to network performance issues?

What versions of the Linux kernel are impacted by CVE-2025-21855?

Company

Resources

Contact