CVE-2025-39897

I

n the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaengine_desc_get_metadata_ptr() which can return an error pointer and lead to potential crashes or undefined behaviour if the pointer retrieval fails. Properly handle the error by unmapping DMA buffer, freeing the skb and returning early to prevent further processing with invalid data.

Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*

History

12 Dec 2025, 18:42

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/8bbceba7dc5090c00105e006ce28d1292cfda8dd - () https://git.kernel.org/stable/c/8bbceba7dc5090c00105e006ce28d1292cfda8dd - Patch
References () https://git.kernel.org/stable/c/92e2fc92bc4eb2bc0e84404316fbc02ddd0a3196 - () https://git.kernel.org/stable/c/92e2fc92bc4eb2bc0e84404316fbc02ddd0a3196 - Patch
References () https://git.kernel.org/stable/c/d0ecda6fdd840b406df6617b003b036f65dd8926 - () https://git.kernel.org/stable/c/d0ecda6fdd840b406df6617b003b036f65dd8926 - Patch

02 Oct 2025, 19:12

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-01 08:15

Updated : 2026-01-14 20:16


NVD link : CVE-2025-39897

Mitre link : CVE-2025-39897

CVE.ORG link : CVE-2025-39897


JSON object : View

Products Affected
CWE
CWE-476

NULL Pointer Dereference