Critical Memory Management Flaw in Linux Kernel: Stmmac IRQ Affinity Hint Issue
Summary
CVE-2025-23155: In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing freed irq affinity_hint The cpumask should not be a local variable, since its pointer is saved to irq_desc and may be accesse... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is known for its robustness and flexibility, supporting a wide range of hardware architectures. However, vulnerabilities can arise, such as the recent issue affecting the stmmac driver, which manages Ethernet interfaces. This vulnerability could potentially compromise system stability and security.
Vulnerability Detail
In the Linux kernel, a vulnerability was identified in the stmmac driver related to the handling of the irq affinity_hint. The issue stems from the cpumask being declared as a local variable, which leads to accessing freed memory. This could allow unauthorized access to sensitive information or lead to system crashes, posing a significant risk to system integrity and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workaround has been provided for this vulnerability. It is strongly recommended to apply the patch as soon as it becomes available to ensure system security.
Conclusion
The CVE-2025-23155 vulnerability in the Linux kernel's stmmac driver poses a significant risk due to improper memory management. Users are urged to update their systems promptly to the latest patched version to ensure security and stability.
See every vulnerability recorded for linux →
FAQ
CVE-2025-23155 is a vulnerability in the Linux kernel related to the stmmac driver, which can lead to unauthorized access to memory and potential system instability.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. By checking your manifest file like package-lock.json, you can determine if your application is affected by this vulnerability.
The risks include unauthorized access to sensitive information, potential system crashes, and overall compromise of system integrity.
Yes, users are advised to update their Linux kernel to the latest version where this vulnerability has been patched.
While no specific workaround is available, it is crucial to prioritize updating your system to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
