CVE-2025-37955

virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()

published May 20, 2025

CVSS
—
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()

The selftests added to our CI by Bui Quang Minh recently reveals

that there is a mem leak on the error path of virtnet_xsk_pool_enable():

unreferenced object 0xffff88800a68a000 (size 2048):

comm "xdp_helper", pid 318, jiffies 4294692778

hex dump (first 32 bytes):

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

backtrace (crc 0):

__kvmalloc_node_noprof+0x402/0x570

virtnet_xsk_pool_enable+0x293/0x6a0 (drivers/net/virtio_net.c:5882)

xp_assign_dev+0x369/0x670 (net/xdp/xsk_buff_pool.c:226)

xsk_bind+0x6a5/0x1ae0

__sys_bind+0x15e/0x230

__x64_sys_bind+0x72/0xb0

do_syscall_64+0xc1/0x1d0

entry_SYSCALL_64_after_hwframe+0x77/0x7f

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00187 · 7.9th percentile
Published
2025-05-20T16:01Z
EPSS history
Timeline
  • 20 MAY 16:01Z
    virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()
    cvelistv5