Vulnerability in Linux Kernel's Rx VLAN Feature

CVE-2025-38532

What is CVE-2025-38532?

A vulnerability exists in the Linux kernel related to the Rx VLAN offload feature. When the device reset is triggered by feature changes, the Rx ring descriptors may not be properly initialized. This failure to clear stale values can lead to malformed socket buffers (SKBs) being built, which could affect packet transmission and processing. The issue has been addressed to ensure that the Rx rings are reset correctly, preventing the retention of potentially harmful stale data.

References