CVE-2025-38270: net: drv: netdevsim: don't napi_complete() from netpoll
In the Linux kernel, the following vulnerability has been resolved:
net: drv: netdevsim: don't napicomplete() from netpoll
netdevsim supports netpoll. Make sure we don't call napicomplete() from it, since it may not be scheduled. Breno reports hitting a warning in napicompletedone():
WARNING: CPU: 14 PID: 104 at net/core/dev.c:6592 napicompletedone+0x2cc/0x560 napipoll+0x2d8/0x3a0 handlesoftirqs+0x1fe/0x710
This is presumably after netpoll stole the SCHED bit prematurely.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need?
The CVSS vector identifies this as a local issue requiring low privileges. No user interaction is required.
What is the potential security impact?
The CVSS assessment rates confidentiality, integrity, and availability impact as high. The overall severity is high, with a CVSS 3.1 score of 7.8.
How might affected behavior appear in logs?
The reported symptom is a WARNING in napi_complete_done(), with a stack trace including __napi_poll and handle_softirqs. The warning is associated with netpoll prematurely taking the SCHED bit.