CVE-2025-39897CWE-476

CVE-2025-39897

High · published October 1, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: xilinx: axienet: Add error handling for RX metadata pointer retrieval

Add proper error checking for dmaengine_desc_get_metadata_ptr() which

can return an error pointer and lead to potential crashes or undefined

behaviour if the pointer retrieval fails.

Properly handle the error by unmapping DMA buffer, freeing the skb and

returning early to prevent further processing with invalid data.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.3th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-10-01T12:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.12.466.12.46
linux/linux_kernel≥ 6.13, < 6.16.66.16.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 01 OCT 07:42Z
    net: xilinx: axienet: Add error handling for RX metadata pointer retrieval
    cvelistv5