עברית

Vulnerability Intelligence

CVE-2025-39897

Medium 5.5

Published
Last modified
NVD status
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaengine_desc_get_metadata_ptr() which can return an error pointer and lead to potential crashes or undefined behaviour if the pointer retrieval fails. Properly handle the error by unmapping DMA buffer, freeing the skb and returning early to prevent further processing with invalid data.

Affected products

linux: linux kernel

References3

Metrics

CVSS 3.1
5.5 MEDIUM Score source: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS — exploit probability
0% percentile: 21 · as of 9 November 2026
CWE
CWE-476

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.