AZL-72605
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-72605.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-72605
- Upstream
- Published
- 2025-07-25T13:15:26Z
- Modified
- 2026-04-01T05:22:10.690257Z
- Summary
- CVE-2025-38375 affecting package kernel for versions less than 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
virtio-net: ensure the received length does not exceed allocated size
In xdplinearizepage, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check.
- References