CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: ensure the received length does not exceed allocated size
In xdplinearizepage, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38375?
CVE-2025-38375 has been classified with high severity due to potential memory corruption and denial of service risks.
How do I fix CVE-2025-38375?
To fix CVE-2025-38375, ensure you update to the latest version of the Linux kernel that includes the patch addressing this vulnerability.
What systems are affected by CVE-2025-38375?
CVE-2025-38375 affects all systems running vulnerable versions of the Linux Kernel with virtio-net functionality.
What is the impact of CVE-2025-38375?
The impact of CVE-2025-38375 includes potential memory corruption vulnerabilities which could lead to data breaches or service interruptions.
Is there a patch available for CVE-2025-38375?
Yes, a patch for CVE-2025-38375 is available in the upstream kernel versions, so users should ensure their systems are updated accordingly.