PT-2025-20349 · Linux+6 · Linux Kernel+6
Published
2025-04-22
·
Updated
2026-05-26
·
CVE-2025-37820
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability in the Linux kernel has been identified, specifically in the xen-netfront component. The
xdp convert buff to frame() function may return NULL if it fails to convert the XDP buffer into an XDP frame due to memory constraints, internal errors, or invalid data. If the result is not checked for NULL, it may lead to a NULL pointer dereference, causing crashes, data corruption, or undefined behavior. Additionally, on XDP redirect failure, the associated page must be released explicitly if it was previously retained via get page(), otherwise, it may result in a memory leak.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu