Linux Kernel Vulnerability CVE-2025-37864: Unbound Entries in DSA Driver
Summary
CVE-2025-37864: In the Linux kernel, the following vulnerability has been resolved: net: dsa: clean up FDB, MDB, VLAN entries on unbind As explained in many places such as commit b117e1e8a86d ("net: dsa: delete dsa_legacy_fdb_add and ds... Affects linux versions 6.1.106-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It supports a wide range of functionalities, including networking, file systems, and process management. The vulnerability CVE-2025-37864 affects the Distributed Switch Architecture (DSA) within the Linux kernel, specifically related to the handling of Forwarding Database (FDB), Multicast Database (MDB), and VLAN entries during driver unbinding processes.
Vulnerability Detail
CVE-2025-37864 arises from the assumption that higher layers of the DSA have balanced additions and deletions of entries. When a driver unbinds with lingering entries, it can lead to warnings and potential leaks. The issue is exacerbated by the fact that not all DSA drivers handle bridge bypass operations uniformly, which can result in unexpected behavior and resource leaks. This vulnerability can compromise the stability and security of the network by allowing uncleaned entries to persist.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users are encouraged to avoid unbinding drivers with lingering entries until the patch is applied.
Conclusion
CVE-2025-37864 is a significant vulnerability in the Linux kernel that can lead to resource leaks and instability in network operations. Users are encouraged to update their systems to the patched version to mitigate risks. Monitoring tools like Vulert can assist in identifying vulnerabilities in your applications.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37864 is a vulnerability in the Linux kernel that affects the handling of FDB, MDB, and VLAN entries in the DSA driver during unbinding.
This vulnerability can lead to resource leaks and instability in network operations, potentially compromising the security of your system.
Yes, a patch is available for Debian 13 in version 6.12.25-1. Users should update their packages to this version.
While there are no specific workarounds, it is advisable to avoid unbinding drivers with lingering entries until the patch is applied.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without requiring any signup.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
