Riskcovery

CVE-2025-38270

net: drv: netdevsim: don't napi_complete() from netpoll

State
Published
Severity
7.8 High
Published
Jul 10, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: drv: netdevsim: don't napi_complete() from netpoll

netdevsim supports netpoll. Make sure we don't call napi_complete() from it, since it may not be scheduled. Breno reports hitting a warning in napi_complete_done():

WARNING: CPU: 14 PID: 104 at net/core/dev.c:6592 napi_complete_done+0x2cc/0x560 __napi_poll+0x2d8/0x3a0 handle_softirqs+0x1fe/0x710

This is presumably after netpoll stole the SCHED bit prematurely.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3762ec05a9fbda16aaaa2568df679ab8ad13f38d to before a8ff2e362d901200a1075c3ca9c56d9c7bbef389Affected
  • 3762ec05a9fbda16aaaa2568df679ab8ad13f38d to before 6837dd877270c57689bd866de9f3de14172c2439Affected
  • 3762ec05a9fbda16aaaa2568df679ab8ad13f38d to before 1264971017b4d7141352a7fe29021bdfce5d885dAffected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.34 through 6.12.*Not affected
  • 6.15.3 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.