Analyzed
Published: 16 Apr 2025, 14:12
Last modified:11 May 2026, 21:13

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.17% LOW
0% probability +0.14%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Apr 2025, 14:12
Published
Vulnerability first disclosed
11 May 2026, 21:13
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: unregister xdp rxq info in the reset path vmxnet3 does not unregister xdp rxq info in the vmxnet3_reset_work() code path as vmxnet3_rq_destroy() is not invoked in this code path. So, we get below message with a backtrace. Missing unregister, handled but fix driver WARNING: CPU:48 PID: 500 at net/core/xdp.c:182 __xdp_rxq_info_reg+0x93/0xf0 This patch fixes the problem by moving the unregister code of XDP from vmxnet3_rq_destroy() to vmxnet3_rq_cleanup().

CVSS Metrics

  • v3.1MEDIUMScore: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.17% Percentile: 6%

Affected Systems

  • linuxlinux

    ≥ 54f00cce11786742bd11e5e68c3bf85e6dc048c9, < a6157484bee3385a425d288a69e1eaf03232f5fc | ≥ 54f00cce11786742bd11e5e68c3bf85e6dc048c9, < 23da4e0bb2a38966d29db0ff90a8fe68fdfa1744 | ≥ 54f00cce11786742bd11e5e68c3bf85e6dc048c9, < 9908541a9e235b7c5e2fbdd59910eaf9c32c3075 | ≥ 54f00cce11786742bd11e5e68c3bf85e6dc048c9, < 0dd765fae295832934bf28e45dd5a355e0891ed4 | 6.6

  • linuxlinux kernel

    ≥ 6.6, < 6.6.108 | ≥ 6.7, < 6.12.49 | ≥ 6.13, < 6.14.2

References (4)