CVE-2025-21890

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-21890
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21890.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-21890
Downstream
Related
Published
2025-03-27T15:15:56Z
Modified
2025-03-27T20:00:23Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix checksums set in idpfrxrsc()

idpfrxrsc() uses skbtransportoffset(skb) while the transport header is not set yet.

This triggers the following warning for CONFIGDEBUGNET=y builds.

DEBUGNETWARNONONCE(!skbtransportheaderwasset(skb))

[ 69.261620] WARNING: CPU: 7 PID: 0 at ./include/linux/skbuff.h:3020 idpfvportsplitqnapipoll (include/linux/skbuff.h:3020) idpf [ 69.261629] Modules linked in: vfat fat dummy bridge inteluncorefrequencytpmi inteluncorefrequencycommon intelvsectpmi idpf intelvsec cdcncm cdceem cdcether usbnet mii xhcipci xhcihcd ehcipci ehcihcd libeth [ 69.261644] CPU: 7 UID: 0 PID: 0 Comm: swapper/7 Tainted: G S W 6.14.0-smp-DEV #1697 [ 69.261648] Tainted: [S]=CPUOUTOFSPEC, [W]=WARN [ 69.261650] RIP: 0010:idpfvportsplitqnapipoll (include/linux/skbuff.h:3020) idpf [ 69.261677] ? _warn (kernel/panic.c:242 kernel/panic.c:748) [ 69.261682] ? idpfvportsplitqnapipoll (include/linux/skbuff.h:3020) idpf [ 69.261687] ? reportbug (lib/bug.c:?) [ 69.261690] ? handlebug (arch/x86/kernel/traps.c:285) [ 69.261694] ? excinvalidop (arch/x86/kernel/traps.c:309) [ 69.261697] ? asmexcinvalidop (arch/x86/include/asm/idtentry.h:621) [ 69.261700] ? _pfxidpfvportsplitqnapipoll (drivers/net/ethernet/intel/idpf/idpftxrx.c:4011) idpf [ 69.261704] ? idpfvportsplitqnapipoll (include/linux/skbuff.h:3020) idpf [ 69.261708] ? idpfvportsplitqnapipoll (drivers/net/ethernet/intel/idpf/idpftxrx.c:3072) idpf [ 69.261712] _napipoll (net/core/dev.c:7194) [ 69.261716] netrxaction (net/core/dev.c:7265) [ 69.261718] ? _qdiscrun (net/sched/schgeneric.c:293) [ 69.261721] ? schedclock (arch/x86/include/asm/preempt.h:84 arch/x86/kernel/tsc.c:288) [ 69.261726] handlesoftirqs (kernel/softirq.c:561)

References

Affected packages

Debian:13 / linux

Package

Name
linux
Purl
pkg:deb/debian/linux?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.12.19-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}