Linux Kernel Memory Allocation Vulnerability in Ethernet Driver by TI

CVE-2025-38545

What is CVE-2025-38545?

A memory allocation issue was identified in the Linux kernel's Ethernet driver used by Texas Instruments, specifically within the am65-cpsw-nuss module. The transition from netdev_alloc_ip_align() to build_skb() did not allocate sufficient memory for the skb_shared_info, which is crucial for proper packet handling. The fix involves correctly accounting for the size of the skb by ensuring that PAGE_SIZE is allocated, inclusive of the required packet length, headroom, and tailroom. This adjustment rectifies potential memory access problems, enhancing the overall security and stability of the Ethernet driver.

References