Frame Length Check Issue in Linux Kernel's virtio-net by Linux Foundation

CVE-2025-38413

What is CVE-2025-38413?

A vulnerability exists in the Linux kernel affecting the virtio-net component, where the frame’s length is not accurately validated before processing. The flaw lies in the len argument passed to the buf_to_xdp function, which does not account for the virtio header length. This oversight can lead to incorrect data processing in network scenarios, potentially compromising data integrity and network stability. The solution implements an additional argument in buf_to_xdp to ensure correct differentiation between the first buffer and subsequent buffers for accurate frame length calculation.

References