CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: Fix accessing freed irq affinityhint
In stmmacrequestirqmultimsi(), a pointer to the stack variable cpumask is passed to irqsetaffinityhint(). This value is stored in irqdesc->affinityhint, but once stmmacrequestirqmultimsi() returns, the pointer becomes dangling.
The affinityhint is exposed via procfs with SIRUGO permissions, allowing any unprivileged process to read it. Accessing this stale pointer can lead to:
- a kernel oops or panic if the referenced memory has been released and unmapped, or - leakage of kernel data into userspace if the memory is re-used for other purposes.
All platforms that use stmmac with PCI MSI (Intel, Loongson, etc) are affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.117.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23155?
CVE-2025-23155 has a medium severity rating, indicating that it can potentially lead to information exposure or system instability.
How do I fix CVE-2025-23155?
To fix CVE-2025-23155, ensure that your Linux kernel is updated to the latest version where the vulnerability has been patched.
What systems are affected by CVE-2025-23155?
CVE-2025-23155 affects various versions of the Linux Kernel utilized in numerous Linux distributions.
What does CVE-2025-23155 specifically address?
CVE-2025-23155 addresses an issue in the Linux kernel related to accessing freed irq affinity_hint, which could lead to undefined behavior.
Is CVE-2025-23155 an active threat?
As of now, there are no confirmed active exploits for CVE-2025-23155, but prompt remediation is advised to mitigate potential risks.