CVE-2025-38375
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38375
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38375.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38375
- Downstream
- Related
- Published
- 2025-07-25T12:53:17.629Z
- Modified
- 2025-11-28T02:35:19.229551Z
- Summary
- virtio-net: ensure the received length does not exceed allocated size
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: ensure the received length does not exceed allocated size
In xdplinearizepage, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38375.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/11f2d0e8be2b5e784ac45fa3da226492c3e506d8
- https://git.kernel.org/stable/c/315dbdd7cdf6aa533829774caaf4d25f1fd20e73
- https://git.kernel.org/stable/c/6aca3dad2145e864dfe4d1060f45eb1bac75dd58
- https://git.kernel.org/stable/c/773e95c268b5d859f51f7547559734fd2a57660c
- https://git.kernel.org/stable/c/80b971be4c37a4d23a7f1abc5ff33dc7733d649b
- https://git.kernel.org/stable/c/982beb7582c193544eb9c6083937ec5ac1c9d651
- https://git.kernel.org/stable/c/bc68bc3563344ccdc57d1961457cdeecab8f81ef
- https://git.kernel.org/stable/c/ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38375.json
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-38375
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced4941d472bf95b4345d6e38906fcf354e74afa311Fixed773e95c268b5d859f51f7547559734fd2a57660cFixedddc8649d363141fb3371dd81a73e1cb4ef8ed1e1Fixed982beb7582c193544eb9c6083937ec5ac1c9d651Fixed6aca3dad2145e864dfe4d1060f45eb1bac75dd58Fixed80b971be4c37a4d23a7f1abc5ff33dc7733d649bFixedbc68bc3563344ccdc57d1961457cdeecab8f81efFixed11f2d0e8be2b5e784ac45fa3da226492c3e506d8Fixed315dbdd7cdf6aa533829774caaf4d25f1fd20e73
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced4.14.0Fixed5.4.297
- Type
- ECOSYSTEM
- Events
-
Introduced5.5.0Fixed5.10.241
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.189
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.144
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.97
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.37
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.15.6