CVE-2025-38569
published 2025-08-19CVE-2025-38569: In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes as soon as SRIOV VFs are created: kernel BUG…
medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
In the Linux kernel, the following vulnerability has been resolved:
benet: fix BUG when creating VFs
benet crashes as soon as SRIOV VFs are created:
kernel BUG at mm/vmalloc.c:3457!
Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
CPU: 4 UID: 0 PID: 7408 Comm: test.sh Kdump: loaded Not tainted 6.16.0+ #1 PREEMPT(voluntary)
[...]
RIP: 0010:vunmap+0x5f/0x70
[...]
Call Trace:
__iommu_dma_free+0xe8/0x1c0
be_cmd_set_mac_list+0x3fe/0x640 [be2net]
be_cmd_set_mac+0xaf/0x110 [be2net]
be_vf_eth_addr_config+0x19f/0x330 [be2net]
be_vf_setup+0x4f7/0x990 [be2net]
be_pci_sriov_configure+0x3a1/0x470 [be2net]
sriov_numvfs_store+0x20b/0x380
kernfs_fop_write_iter+0x354/0x530
vfs_write+0x9b9/0xf60
ksys_write+0xf3/0x1d0
do_syscall_64+0x8c/0x3d0
be_cmd_set_mac_list() calls dma_free_coherent() under a spin_lock_bh.
Fix it by freeing only after the lock has been released.
Affected
48 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 6.1.148-1 (bookworm) | linux 6.1.148-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.148-1 (bookworm) | linux 6.1.148-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 1a82d19ca2d6835904ee71e2d40fd331098f94a0 < d5dc09ee5d74277bc47193fe28ce8703e229331b | d5dc09ee5d74277bc47193fe28ce8703e229331b |
| linux | linux | >= 1a82d19ca2d6835904ee71e2d40fd331098f94a0 < f4e4e0c4bc4d799d6fa39055acdbc3af066cd13e | f4e4e0c4bc4d799d6fa39055acdbc3af066cd13e |
| linux | linux | >= 1a82d19ca2d6835904ee71e2d40fd331098f94a0 < 5a40f8af2ba1b9bdf46e2db10e8c9710538fbc63 | 5a40f8af2ba1b9bdf46e2db10e8c9710538fbc63 |
| linux | linux | >= 41d731e7920387ea13e2fb440a1e235686faeeb9 < c377ba2be9430d165a98e4b782902ed630bc7546 | c377ba2be9430d165a98e4b782902ed630bc7546 |
| linux | linux | >= 4393452e6c0c027971ec9bcc9557f52e63db3f0a < 46d44a23a3723a89deeb65b13cddb17f8d9f2700 | 46d44a23a3723a89deeb65b13cddb17f8d9f2700 |
| linux | linux | >= 5.10.235 < 5.10.241 | 5.10.241 |
| linux | linux | >= 5.15.179 < 5.15.190 | 5.15.190 |
| linux | linux | >= 5.4.291 < 5.4.297 | 5.4.297 |
| linux | linux | >= 6.1.131 < 6.1.148 | 6.1.148 |
| linux | linux | >= 6.12.19 < 6.12.42 | 6.12.42 |
| linux | linux | >= 6.13.7 < 6.14 | 6.14 |
| linux | linux | >= 6.6.83 < 6.6.102 | 6.6.102 |
| linux | linux | >= 671aaa17bd3153e25526934f92307169ce927b5e < f80b34ebc579216407b128e9d155bfcae875c30f | f80b34ebc579216407b128e9d155bfcae875c30f |
| linux | linux | >= 797bb9439c0489bbea4b8808297ec7a569098667 < 3697e37e012bbd2bb5a5b467689811ba097b2eff | 3697e37e012bbd2bb5a5b467689811ba097b2eff |
| linux | linux | >= 7cfae8627511361f90a1a22dfae556c3fbc5bd8d < 975e73b9102d844a3dc3f091ad631c56145c8b4c | 975e73b9102d844a3dc3f091ad631c56145c8b4c |
| linux | linux | >= fd1ef3b1bdd3fec683ebd19eb3acc6a2cb60b5c6 < 0ddfe8b127ef1149fddccb79db6e6eaba7738e7d | 0ddfe8b127ef1149fddccb79db6e6eaba7738e7d |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.244-1 | 5.10.244-1 |
| linux | linux_kernel | >= 0 < 6.1.148-1 | 6.1.148-1 |
| linux | linux_kernel | >= 0 < 6.12.43-1 | 6.12.43-1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM