What’s Vulnerable › Vulnerabilities

CVE-2025-38375: virtio-net: ensure the received length does not exceed allocated size

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-25 · updated 2026-10-15
• Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_page, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.

Affected products

• Debian Linux: 11.0
• Linux kernel: from 4.14 before 5.4.297; from 5.5 before 5.10.241; from 5.11 before 5.15.189; from 5.16 before 6.1.144; from 6.2 before 6.6.97; from 6.7 before 6.12.37 — fixed in 5.10.241, 5.15.189, 5.4.297, 6.1.144, 6.12.37, 6.15.6

How to fix

Upgrade to a fixed version: Linux kernel 5.10.241, 5.15.189, 5.4.297, 6.1.144. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/11f2d0e8be2b5e784ac45fa3da226492c3e506d8
• https://git.kernel.org/stable/c/315dbdd7cdf6aa533829774caaf4d25f1fd20e73
• https://git.kernel.org/stable/c/6aca3dad2145e864dfe4d1060f45eb1bac75dd58
• https://git.kernel.org/stable/c/773e95c268b5d859f51f7547559734fd2a57660c
• https://git.kernel.org/stable/c/80b971be4c37a4d23a7f1abc5ff33dc7733d649b
• https://git.kernel.org/stable/c/982beb7582c193544eb9c6083937ec5ac1c9d651
• https://git.kernel.org/stable/c/bc68bc3563344ccdc57d1961457cdeecab8f81ef
• https://git.kernel.org/stable/c/ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html

Get alerted when CVE-2025-38375 or the next vulnerability affects your stack