Error Handling Vulnerability in Xilinx AXIENET on Linux Kernel

CVE-2025-39897

What is CVE-2025-39897?

A vulnerability exists in the Xilinx AXIENET driver within the Linux kernel that impacts the processing of DMA engine metadata pointers. If the retrieval of a metadata pointer fails, it may return an error pointer, potentially leading to system crashes or undefined behavior. Proper error handling has been implemented to mitigate this risk, including unmapping the DMA buffer and freeing the associated skb before further processing to ensure invalid data does not compromise system integrity.

References