cbcvebase.
CVE-2025-37955
published 2025-05-20

CVE-2025-37955: In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The selftests added to our…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.16%
5.8th percentile
In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The selftests added to our CI by Bui Quang Minh recently reveals that there is a mem leak on the error path of virtnet_xsk_pool_enable(): unreferenced object 0xffff88800a68a000 (size 2048): comm "xdp_helper", pid 318, jiffies 4294692778 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): __kvmalloc_node_noprof+0x402/0x570 virtnet_xsk_pool_enable+0x293/0x6a0 (drivers/net/virtio_net.c:5882) xp_assign_dev+0x369/0x670 (net/xdp/xsk_buff_pool.c:226) xsk_bind+0x6a5/0x1ae0 __sys_bind+0x15e/0x230 __x64_sys_bind+0x72/0xb0 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Affected

10 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.12.29-1 (forky)linux 6.12.29-1 (forky)
linuxlinux
linuxlinux>= e9f3962441c0a4d6f16c656e6c8aa02a3ccdd568 < 94a6f6c204abb2b2dcd2ce287536cc924469cfb594a6f6c204abb2b2dcd2ce287536cc924469cfb5
linuxlinux>= e9f3962441c0a4d6f16c656e6c8aa02a3ccdd568 < ba6917810bb4a5a32661fa941717399052b3f0d9ba6917810bb4a5a32661fa941717399052b3f0d9
linuxlinux>= e9f3962441c0a4d6f16c656e6c8aa02a3ccdd568 < 4397684a292a71fbc1e815c3e283f7490ddce5ae4397684a292a71fbc1e815c3e283f7490ddce5ae
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.12.29-16.12.29-1
linuxlinux_kernel>= 0 < 6.12.29-16.12.29-1
linuxlinux_kernel>= 6.11 < 6.12.296.12.29
linuxlinux_kernel>= 6.13 < 6.14.76.14.7

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.