{"id":"CVE-2025-38375","revision":"6a9bd28f2ed6492385cc0cee74d44d16","records":[{"revision":"6a9bd28f2ed6492385cc0cee74d44d16","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-38375","aliases":[],"title":"virtio-net: ensure the received length does not exceed allocated size","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-net: ensure the received length does not exceed allocated size\n\nIn xdp_linearize_page, when reading the following buffers from the ring,\nwe forget to check the received length with the true allocate size. This\ncan lead to an out-of-bound read. This commit adds that missing check.","state":0,"publishedAt":"2025-07-25T12:53:17.629+00:00","modifiedAt":"2026-10-15T21:52:14.862+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/virtio_net.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4941d472bf95b4345d6e38906fcf354e74afa311\",\n                            \"lessThan\": \"773e95c268b5d859f51f7547559734fd2a57660c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4941d472bf95b4345d6e38906fcf354e74afa311\",\n                            \"lessThan\": \"ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4941d472bf95b4345d6e38906fcf354e74afa311\",\n                            \"lessThan\": \"982beb7582c193544eb9c6083937ec5ac1c9d651\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4941d472bf95b4345d6e38906fcf354e74afa311\",\n                            \"lessThan\": \"6aca3dad2145e864dfe4d1060f45eb1bac75dd58\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4941d472bf95b4345d6e38906fcf354e74afa311\",\n                            \"lessThan\": \"80b971be4c37a4d23a7f1abc5ff33dc7733d649b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4941d472bf95b4345d6e38906fcf354e74afa311\",\n                            \"lessThan\": \"bc68bc3563344ccdc57d1961457cdeecab8f81ef\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4941d472bf95b4345d6e38906fcf354e74afa311\",\n                            \"lessThan\": \"11f2d0e8be2b5e784ac45fa3da226492c3e506d8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4941d472bf95b4345d6e38906fcf354e74afa311\",\n                            \"lessThan\": \"315dbdd7cdf6aa533829774caaf4d25f1fd20e73\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/virtio_net.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.14\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.14\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.297\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.241\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.189\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.144\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.97\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.37\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.15.6\",\n                            \"lessThanOrEqual\": \"6.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.16\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.4,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/773e95c268b5d859f51f7547559734fd2a57660c","https://git.kernel.org/stable/c/ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1","https://git.kernel.org/stable/c/982beb7582c193544eb9c6083937ec5ac1c9d651","https://git.kernel.org/stable/c/6aca3dad2145e864dfe4d1060f45eb1bac75dd58","https://git.kernel.org/stable/c/80b971be4c37a4d23a7f1abc5ff33dc7733d649b","https://git.kernel.org/stable/c/bc68bc3563344ccdc57d1961457cdeecab8f81ef","https://git.kernel.org/stable/c/11f2d0e8be2b5e784ac45fa3da226492c3e506d8","https://git.kernel.org/stable/c/315dbdd7cdf6aa533829774caaf4d25f1fd20e73"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38375","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-38375","identifiers":["CVE-2025-38375"]},"retained":false,"historicalAffected":[]}],"coverage":[]}