CVE-2025-22101: net: libwx: fix Tx L4 checksum

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-04-16 · updated 2026-09-14

Description

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix Tx L4 checksum The hardware only supports L4 checksum offload for TCP/UDP/SCTP protocol. There was a bug to set Tx checksum flag for the other protocol that results in Tx ring hang. Fix to compute software checksum for these packets.

Affected products

Linux kernel: from 6.5 before 6.12.36; from 6.13 before 6.14.2 — fixed in 6.12.36, 6.14.2

How to fix

Upgrade to a fixed version: Linux kernel 6.12.36, 6.14.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/5f583e059eced1857f41e221ef5951e029e632bd
https://git.kernel.org/stable/c/6d56ea133adf0389b216ba6e47f7f35e95776713
https://git.kernel.org/stable/c/9c6c85ae77efbe29420883082b3a7b9fd2c57602
https://git.kernel.org/stable/c/c7d82913d5f9e97860772ee4051eaa66b56a6273

Get alerted when CVE-2025-22101 or the next vulnerability affects your stack