CVE-2025-22060: net: mvpp2: Prevent parser TCAM memory corruption
In the Linux kernel, the following vulnerability has been resolved:
net: mvpp2: Prevent parser TCAM memory corruption
Protect the parser TCAM/SRAM memory, and the cached (shadow) SRAM information, from concurrent modifications.
Both the TCAM and SRAM tables are indirectly accessed by configuring an index register that selects the row to read or write to. This means that operations must be atomic in order to, e.g., avoid spreading writes across multiple rows. Since the shadow SRAM array is used to find free rows in the hardware table, it must also be protected in order to avoid TOCTOU errors where multiple cores allocate the same row.
This issue was detected in a situation where mvpp2setrxmode() ran concurrently on two CPUs. In this particular case the MVPP2PEMACUCPROMISCUOUS entry was corrupted, causing the classifier unit to drop all incoming unicast - indicated by the rxclassifierdrops counter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22060?
CVE-2025-22060 has been categorized as a medium severity vulnerability which affects the Linux kernel.
How do I fix CVE-2025-22060?
To fix CVE-2025-22060, update your Linux kernel to a version that addresses the vulnerability, specifically to versions later than 6.14.2.
Which versions of the Linux kernel are affected by CVE-2025-22060?
CVE-2025-22060 affects Linux kernel versions between 3.17 and 6.14.2.
What are the implications of CVE-2025-22060?
The implications of CVE-2025-22060 include potential memory corruption issues that could lead to system instability or exploitation.
Who can be impacted by CVE-2025-22060?
Any system running vulnerable versions of the Linux kernel, especially in environments relying on network functionalities, can be impacted by CVE-2025-22060.