Log in Start free

Vulnerability · Published May 20, 2025 · Assigned by Linux

CVE-2025-37955virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 91.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The selftests added to our CI by Bui Quang Minh recently reveals that there is a mem leak on the error path of virtnet_xsk_pool_enable(): unreferenced object 0xffff88800a68a000 (size 2048): comm "xdp_helper", pid 318, jiffies 4294692778 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): __kvmalloc_node_noprof+0x402/0x570 virtnet_xsk_pool_enable+0x293/0x6a0 (drivers/net/virtio_net.c:5882) xp_assign_dev+0x369/0x670 (net/xdp/xsk_buff_pool.c:226) xsk_bind+0x6a5/0x1ae0 __sys_bind+0x15e/0x230 __x64_sys_bind+0x72/0xb0 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.12.29-1DEBIAN-CVE-2025-37955
Debian:14linux6.12.29-1DEBIAN-CVE-2025-37955
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-aws-6.146.14.0-1011.11~24.04.1UBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-aws-6.146.14.0-1011.11~24.04.1USN-7699-1
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-37955
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-gcp-6.146.14.0-1014.15~24.04.1USN-7699-1
Ubuntu:24.04:LTSlinux-gcp-6.146.14.0-1014.15~24.04.1UBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-hwe-6.146.14.0-28.28~24.04.1USN-7699-2
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-oem-6.146.14.0-1010.10USN-7699-2
Ubuntu:24.04:LTSlinux-oem-6.146.14.0-1010.10UBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-oracle-6.146.14.0-1011.11~24.04.1USN-7699-1
Ubuntu:24.04:LTSlinux-oracle-6.146.14.0-1011.11~24.04.1UBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-37955
Ubuntu:24.04:LTSlinux-riscv-6.146.14.0-28.28.1~24.04.1UBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-37955
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-37955

Affected products (as reported)

VendorProductVersions
Linux Linux e9f3962441c0a4d6f16c656e6c8aa02a3ccdd568 – before 94a6f6c204abb2b2dcd2ce287536cc924469cfb5e9f3962441c0a4d6f16c656e6c8aa02a3ccdd568 – before ba6917810bb4a5a32661fa941717399052b3f0d9e9f3962441c0a4d6f16c656e6c8aa02a3ccdd568 – before 4397684a292a71fbc1e815c3e283f7490ddce5ae
Linux Linux 6.11

References