In the Linux kernel, the following vulnerability has been resolved:
vmxnet3: unregister xdp rxq info in the reset path
vmxnet3 does not unregister xdp rxq info in the vmxnet3resetwork() code path as vmxnet3rqdestroy() is not invoked in this code path. So, we get below message with a backtrace.
Missing unregister, handled but fix driver WARNING: CPU:48 PID: 500 at net/core/xdp.c:182 _xdprxqinforeg+0x93/0xf0
This patch fixes the problem by moving the unregister code of XDP from vmxnet3rqdestroy() to vmxnet3rqcleanup().
[
{
"id": "CVE-2025-22106-1ac1913d",
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0dd765fae295832934bf28e45dd5a355e0891ed4",
"signature_version": "v1",
"digest": {
"line_hashes": [
"75814281314127853395780269508260074570",
"156526167872463386416189239444885523671",
"132526779503912523402762682263082004844",
"266102810120894674541042296117270419905",
"204890972847605405945613561834944495220",
"295489979667498229483579812341138812510",
"308593484488643397904674185357690894155",
"322160767425473274190037707169657511428",
"158959563731543787198502913030882224606",
"159419845854234623999679080727521695761",
"224450311999684564069697630099046737744"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-22106-2e4e8b9d",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c",
"function": "vmxnet3_rq_cleanup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6157484bee3385a425d288a69e1eaf03232f5fc",
"signature_version": "v1",
"digest": {
"length": 1223.0,
"function_hash": "9156242930975858296083977828456429090"
}
},
{
"id": "CVE-2025-22106-3a97e4e2",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c",
"function": "vmxnet3_rq_destroy"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0dd765fae295832934bf28e45dd5a355e0891ed4",
"signature_version": "v1",
"digest": {
"length": 1479.0,
"function_hash": "200584497556392914769196187027401879126"
}
},
{
"id": "CVE-2025-22106-47712c32",
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9908541a9e235b7c5e2fbdd59910eaf9c32c3075",
"signature_version": "v1",
"digest": {
"line_hashes": [
"75814281314127853395780269508260074570",
"156526167872463386416189239444885523671",
"132526779503912523402762682263082004844",
"266102810120894674541042296117270419905",
"204890972847605405945613561834944495220",
"295489979667498229483579812341138812510",
"308593484488643397904674185357690894155",
"322160767425473274190037707169657511428",
"158959563731543787198502913030882224606",
"159419845854234623999679080727521695761",
"224450311999684564069697630099046737744"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-22106-9bba3a1c",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c",
"function": "vmxnet3_rq_destroy"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9908541a9e235b7c5e2fbdd59910eaf9c32c3075",
"signature_version": "v1",
"digest": {
"length": 1479.0,
"function_hash": "200584497556392914769196187027401879126"
}
},
{
"id": "CVE-2025-22106-bd5b10d6",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c",
"function": "vmxnet3_rq_cleanup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0dd765fae295832934bf28e45dd5a355e0891ed4",
"signature_version": "v1",
"digest": {
"length": 1223.0,
"function_hash": "9156242930975858296083977828456429090"
}
},
{
"id": "CVE-2025-22106-d2daf324",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c",
"function": "vmxnet3_rq_destroy"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@23da4e0bb2a38966d29db0ff90a8fe68fdfa1744",
"signature_version": "v1",
"digest": {
"length": 1479.0,
"function_hash": "200584497556392914769196187027401879126"
}
},
{
"id": "CVE-2025-22106-d3972260",
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@23da4e0bb2a38966d29db0ff90a8fe68fdfa1744",
"signature_version": "v1",
"digest": {
"line_hashes": [
"75814281314127853395780269508260074570",
"156526167872463386416189239444885523671",
"132526779503912523402762682263082004844",
"266102810120894674541042296117270419905",
"204890972847605405945613561834944495220",
"295489979667498229483579812341138812510",
"308593484488643397904674185357690894155",
"322160767425473274190037707169657511428",
"158959563731543787198502913030882224606",
"159419845854234623999679080727521695761",
"224450311999684564069697630099046737744"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-22106-dca5bc44",
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6157484bee3385a425d288a69e1eaf03232f5fc",
"signature_version": "v1",
"digest": {
"line_hashes": [
"75814281314127853395780269508260074570",
"156526167872463386416189239444885523671",
"132526779503912523402762682263082004844",
"266102810120894674541042296117270419905",
"204890972847605405945613561834944495220",
"295489979667498229483579812341138812510",
"308593484488643397904674185357690894155",
"322160767425473274190037707169657511428",
"158959563731543787198502913030882224606",
"159419845854234623999679080727521695761",
"224450311999684564069697630099046737744"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-22106-e1ac8caf",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c",
"function": "vmxnet3_rq_cleanup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@23da4e0bb2a38966d29db0ff90a8fe68fdfa1744",
"signature_version": "v1",
"digest": {
"length": 1223.0,
"function_hash": "9156242930975858296083977828456429090"
}
},
{
"id": "CVE-2025-22106-e338b05b",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c",
"function": "vmxnet3_rq_cleanup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9908541a9e235b7c5e2fbdd59910eaf9c32c3075",
"signature_version": "v1",
"digest": {
"length": 1223.0,
"function_hash": "9156242930975858296083977828456429090"
}
},
{
"id": "CVE-2025-22106-e98832b0",
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "drivers/net/vmxnet3/vmxnet3_drv.c",
"function": "vmxnet3_rq_destroy"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6157484bee3385a425d288a69e1eaf03232f5fc",
"signature_version": "v1",
"digest": {
"length": 1260.0,
"function_hash": "72588725888917910171024589254042748171"
}
}
]