CVE-2025-39718: vsock/virtio: Validate length in packet header before skb_put()
In the Linux kernel, the following vulnerability has been resolved:
vsock/virtio: Validate length in packet header before skbput()
When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtiovsockskbrxput(). Unfortunately, virtiovsockskbrxput() uses the length from the packet header as the length argument to skbput(), potentially resulting in SKB overflow if the host has gone wonky.
Validate the length as advertised by the packet header before calling virtiovsockskbrxput().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39718?
CVE-2025-39718 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-39718?
To fix CVE-2025-39718, update to the latest version of the Linux kernel where this vulnerability has been resolved.
What is the impact of CVE-2025-39718?
The impact of CVE-2025-39718 could allow an attacker to potentially exploit the vulnerability to manipulate packet headers.
Which versions of Linux kernel are affected by CVE-2025-39718?
CVE-2025-39718 affects certain versions of the Linux kernel prior to the patch release that resolves the vulnerability.
Is there a workaround for CVE-2025-39718?
Currently, there are no specific workarounds for CVE-2025-39718; applying the kernel update is recommended.