CVE-2025-38270

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38270

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: net: drv: netdevsim: don't napi_complete() from netpoll netdevsim supports netpoll. Make sure we don't call napi_complete() from it, since it may not be scheduled. Breno reports hitting a warning in napi_complete_done(): WARNING: CPU: 14 PID: 104 at net/core/dev.c:6592 napi_complete_done+0x2cc/0x560 __napi_poll+0x2d8/0x3a0 handle_softirqs+0x1fe/0x710 This is presumably after netpoll stole the SCHED bit prematurely.

References
Link Resource
https://git.kernel.org/stable/c/1264971017b4d7141352a7fe29021bdfce5d885d Patch
https://git.kernel.org/stable/c/6837dd877270c57689bd866de9f3de14172c2439 Patch
https://git.kernel.org/stable/c/a8ff2e362d901200a1075c3ca9c56d9c7bbef389 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*
History

20 Nov 2025, 16:49

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/1264971017b4d7141352a7fe29021bdfce5d885d - () https://git.kernel.org/stable/c/1264971017b4d7141352a7fe29021bdfce5d885d - Patch
References () https://git.kernel.org/stable/c/6837dd877270c57689bd866de9f3de14172c2439 - () https://git.kernel.org/stable/c/6837dd877270c57689bd866de9f3de14172c2439 - Patch
References () https://git.kernel.org/stable/c/a8ff2e362d901200a1075c3ca9c56d9c7bbef389 - () https://git.kernel.org/stable/c/a8ff2e362d901200a1075c3ca9c56d9c7bbef389 - Patch
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE NVD-CWE-noinfo

10 Jul 2025, 13:17

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: drv: netdevsim: no ejecutar napi_complete() desde netpoll. netdevsim es compatible con netpoll. Asegúrese de no ejecutar napi_complete() desde él, ya que podría no estar programado. Breno informa de una advertencia en napi_complete_done(): ADVERTENCIA: CPU: 14 PID: 104 en net/core/dev.c:6592 napi_complete_done+0x2cc/0x560 __napi_poll+0x2d8/0x3a0 handle_softirqs+0x1fe/0x710. Presumiblemente, esto se debe a que netpoll robó el bit SCHED prematuramente.

10 Jul 2025, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-10 08:15

Updated : 2025-11-20 16:49

NVD link : CVE-2025-38270

Mitre link : CVE-2025-38270

CVE.ORG link : CVE-2025-38270

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo