CVE-2025-37820: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
First published: Thu May 08 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() The function xdp_convert_buff_to_frame() may return NULL if it fails to correctly convert the XDP buffer into an XDP frame due to memory constraints, internal errors, or invalid data. Failing to check for NULL may lead to a NULL pointer dereference if the result is used later in processing, potentially causing crashes, data corruption, or undefined behavior. On XDP redirect failure, the associated page must be released explicitly if it was previously retained via get_page(). Failing to do so may result in a memory leak, as the pages reference count is not decremented.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/5b83d30c63f9964acb1bc63eb8e670b9e0d2c240
- https://git.kernel.org/stable/c/cefd8a2e2de46209ce66e6d30c237eb59b6c5bfa
- https://git.kernel.org/stable/c/d6a9c4e6f9b3ec3ad98468c950ad214af8a2efb9
- https://git.kernel.org/stable/c/eefccd889df3b49d92e7349d94c4aa7e1ba19f6c
- https://git.kernel.org/stable/c/cc3628dcd851ddd8d418bf0c897024b4621ddc92
Frequently Asked Questions
What is the severity of CVE-2025-37820?
CVE-2025-37820 has a medium severity rating due to its potential impact on network performance in the Linux kernel.
What systems are affected by CVE-2025-37820?
CVE-2025-37820 affects various versions of the Linux kernel where the xen-netfront driver is utilized.
How do I fix CVE-2025-37820?
To fix CVE-2025-37820, you should update to the latest patched version of the Linux kernel provided by your distribution.
What are the implications of CVE-2025-37820?
CVE-2025-37820 can lead to network instability and potential denial of service as it affects buffer conversions.
When was CVE-2025-37820 disclosed?
CVE-2025-37820 was disclosed as part of a series of security improvements in the Linux kernel.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- agent/event
- vendor/linux
- canonical/linux kernel