CVE-2025-38570: eth: fbnic: unlink NAPIs from queues on error to open
In the Linux kernel, the following vulnerability has been resolved:
eth: fbnic: unlink NAPIs from queues on error to open
CI hit a UaF in fbnic in the AFXDP portion of the queues.py test. The UaF is in the skmarknapiidonce() call in xskbind(), NAPI has been freed. Looks like the device failed to open earlier, and we lack clearing the NAPI pointer from the queue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38570?
CVE-2025-38570 has been identified as having a high severity due to the potential for use-after-free vulnerabilities in the Linux kernel.
How do I fix CVE-2025-38570?
To fix CVE-2025-38570, update your Linux kernel to the latest stable version where the vulnerability has been patched.
Which versions of the Linux kernel are affected by CVE-2025-38570?
CVE-2025-38570 affects multiple versions of the Linux kernel, specifically those prior to the fix implemented in the recent updates.
What components of the Linux kernel are impacted by CVE-2025-38570?
CVE-2025-38570 impacts the Ethernet subsystem, particularly the fbnic driver and the AF_XDP portion of the queues.
What actions should I take if my system is vulnerable to CVE-2025-38570?
If your system is vulnerable to CVE-2025-38570, it is crucial to apply security patches and updates immediately to mitigate potential risk.