CVE-2025-22106: vmxnet3: unregister xdp rxq info in the reset path
In the Linux kernel, the following vulnerability has been resolved:
vmxnet3: unregister xdp rxq info in the reset path
vmxnet3 does not unregister xdp rxq info in the vmxnet3resetwork() code path as vmxnet3rqdestroy() is not invoked in this code path. So, we get below message with a backtrace.
Missing unregister, handled but fix driver WARNING: CPU:48 PID: 500 at net/core/xdp.c:182 xdprxqinforeg+0x93/0xf0
This patch fixes the problem by moving the unregister code of XDP from vmxnet3rqdestroy() to vmxnet3rqcleanup().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22106?
CVE-2025-22106 is a medium-severity vulnerability affecting the Linux kernel and VMware's vmxnet3.
How do I fix CVE-2025-22106?
To resolve CVE-2025-22106, update to the latest version of the Linux kernel or VMware vmxnet3 that has addressed this vulnerability.
Which systems are affected by CVE-2025-22106?
CVE-2025-22106 affects systems running the Linux kernel and VMware vmxnet3.
What are the potential risks of CVE-2025-22106?
The main risk of CVE-2025-22106 is the possibility of unregistered xdp rxq information, which can lead to undefined behavior.
When was CVE-2025-22106 disclosed?
CVE-2025-22106 was disclosed in 2025, following its identification in the Linux kernel vulnerabilities.