CVE-2025-38341

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-38341
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38341.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-38341
Downstream
Published
2025-07-10T08:15:10.928Z
Modified
2026-03-12T23:55:09.143264Z
Summary
eth: fbnic: avoid double free when failing to DMA-map FW msg
Details

In the Linux kernel, the following vulnerability has been resolved:

eth: fbnic: avoid double free when failing to DMA-map FW msg

The semantics are that caller of fbnicmbxmap_msg() retains the ownership of the message on error. All existing callers dutifully free the page.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38341.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
da3cde08209ec1c915195c2331c275397f34a731
Fixed
670179265ad787b9dd8e701601914618b8927755
Fixed
0a211e23852019ef55c70094524e87a944accbb5
Fixed
5bd1bafd4474ee26f504b41aba11f3e2a1175b88

Affected versions

v6.*
v6.10
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.3
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.34
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.15.1
v6.15.2
v6.15.3
v6.16-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38341.json"
vanir_signatures 
[
    {
        "id": "CVE-2025-38341-101ae915",
        "digest": {
            "line_hashes": [
                "339123640948766134000670147821707305926",
                "104908267362761086148713380153774024555",
                "53114609244515579202207463709126814089",
                "176965539901785908225483689451398747823",
                "264573194882042813155960420276806607563",
                "226957047753794806595448145500866860445",
                "244918620423750676223312420823064543288"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a211e23852019ef55c70094524e87a944accbb5",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "drivers/net/ethernet/meta/fbnic/fbnic_fw.c"
        }
    },
    {
        "id": "CVE-2025-38341-a2d1dd37",
        "digest": {
            "function_hash": "163422611793973083664369589701747229646",
            "length": 973.0
        },
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0a211e23852019ef55c70094524e87a944accbb5",
        "deprecated": false,
        "signature_version": "v1",
        "target": {
            "file": "drivers/net/ethernet/meta/fbnic/fbnic_fw.c",
            "function": "fbnic_mbx_map_msg"
        }
    }
]