HomeDefectsLIN1023-14183
Fixed

LIN1023-14183 : Security Advisory - linux - CVE-2025-38375

Created: Jul 27, 2025    Updated: Oct 22, 2025
Resolved Date: Oct 19, 2025
Found In Version: 10.23.30.1
Fix Version: 10.23.30.19
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:EOL][EOL]virtio-net: ensure the received length does not exceed allocated size[EOL][EOL]In xdp_linearize_page, when reading the following buffers from the ring,[EOL]we forget to check the received length with the true allocate size. This[EOL]can lead to an out-of-bound read. This commit adds that missing check.

CREATE(Triage):(User=admin) [CVE-2025-38375 (https://nvd.nist.gov/vuln/detail/CVE-2025-38375)

CVEs


Live chat
Online