CVE-2025-39897: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval
In the Linux kernel, the following vulnerability has been resolved:
net: xilinx: axienet: Add error handling for RX metadata pointer retrieval
Add proper error checking for dmaenginedescgetmetadataptr() which can return an error pointer and lead to potential crashes or undefined behaviour if the pointer retrieval fails.
Properly handle the error by unmapping DMA buffer, freeing the skb and returning early to prevent further processing with invalid data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39897?
The severity of CVE-2025-39897 is classified as medium due to potential crashes caused by improper error handling.
How do I fix CVE-2025-39897?
To fix CVE-2025-39897, update your Linux kernel to the latest version where this vulnerability is resolved.
What systems are affected by CVE-2025-39897?
CVE-2025-39897 affects systems running vulnerable versions of the Linux kernel that utilize the Xilinx axienet network driver.
What is the impact of CVE-2025-39897?
The impact of CVE-2025-39897 includes potential system crashes and undefined behavior due to mishandled DMA metadata pointers.
Is there a workaround for CVE-2025-39897?
There are no specific workarounds for CVE-2025-39897; the recommended action is to apply the appropriate kernel update.