CVE-2025-37955: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: free xskbuffs on error in virtnetxskpoolenable()
The selftests added to our CI by Bui Quang Minh recently reveals that there is a mem leak on the error path of virtnetxskpoolenable():
unreferenced object 0xffff88800a68a000 (size 2048): comm "xdphelper", pid 318, jiffies 4294692778 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): kvmallocnodenoprof+0x402/0x570 virtnetxskpoolenable+0x293/0x6a0 (drivers/net/virtionet.c:5882) xpassigndev+0x369/0x670 (net/xdp/xskbuffpool.c:226) xskbind+0x6a5/0x1ae0 sysbind+0x15e/0x230 x64sysbind+0x72/0xb0 dosyscall64+0xc1/0x1d0 entrySYSCALL64afterhwframe+0x77/0x7f
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37955?
CVE-2025-37955 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-37955?
To fix CVE-2025-37955, update your Linux kernel to the latest version where this vulnerability has been patched.
What systems are affected by CVE-2025-37955?
CVE-2025-37955 affects systems running specific versions of the Linux kernel that utilize virtio-net.
What impact does CVE-2025-37955 have on my system?
CVE-2025-37955 can lead to memory leaks, potentially affecting system performance and stability.
When was CVE-2025-37955 disclosed?
CVE-2025-37955 was disclosed as part of a security update in the Linux kernel.