Out-of-Bound Read Vulnerability in Linux Kernel - CVE-2025-38375
Summary
CVE-2025-38375: In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_page, when reading the following buffers from the ring, we forget... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is known for its stability, performance, and flexibility, making it a popular choice for servers, desktops, and embedded systems. This vulnerability affects the virtio-net driver, which is responsible for network communication in virtualized environments, potentially compromising system security.
Vulnerability Detail
CVE-2025-38375 is a vulnerability in the Linux kernel's virtio-net driver that allows for an out-of-bound read due to a failure to verify the received length against the allocated buffer size. This oversight can lead to unauthorized access to memory locations, potentially exposing sensitive data or causing system instability. The issue arises in the xdp_linearize_page function when reading buffers from the ring, where the length check is omitted.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workarounds are mentioned for this vulnerability. It is advisable to apply the patch as soon as it becomes available.
Conclusion
CVE-2025-38375 is a significant vulnerability in the Linux kernel that requires immediate attention. Users are encouraged to update their systems to the latest patched version to ensure security and stability. Utilizing tools like Vulert can help in monitoring vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38375 is a vulnerability in the Linux kernel's virtio-net driver that can lead to an out-of-bound read, potentially compromising system security.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The risks include unauthorized access to sensitive data and potential system instability due to memory access violations.
Yes, a patch is available for Debian 13 in version 6.12.37-1 or later. It is recommended to update your system to this version.
While no specific workarounds are provided, it is crucial to prioritize applying the patch as soon as possible to mitigate the risks.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
