CVE-2025-21954

netmem: prevent TX of unreadable skbs

published April 1, 2025

CVSS
—
EPSS
0%
Percentile
41.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netmem: prevent TX of unreadable skbs

Currently on stable trees we have support for netmem/devmem RX but not

TX. It is not safe to forward/redirect an RX unreadable netmem packet

into the device's TX path, as the device may call dma-mapping APIs on

dma addrs that should not be passed to it.

Fix this by preventing the xmit of unreadable skbs.

Tested by configuring tc redirect:

sudo tc qdisc add dev eth1 ingress

sudo tc filter add dev eth1 ingress protocol ip prio 1 flower ip_proto \

tcp src_ip 192.168.1.12 action mirred egress redirect dev eth1

Before, I see unreadable skbs in the driver's TX path passed to dma

mapping APIs.

After, I don't see unreadable skbs in the driver's TX path passed to dma

mapping APIs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00496 · 41.7th percentile
Published
2025-04-01T15:46Z
EPSS history
Timeline
  • 01 APR 15:46Z
    netmem: prevent TX of unreadable skbs
    cvelistv5