{"id":"DEBIAN-CVE-2025-22075","details":"In the Linux kernel, the following vulnerability has been resolved:  rtnetlink: Allocate vfinfo size for VF GUIDs when supported  Commit 30aad41721e0 (\"net/core: Add support for getting VF GUIDs\") added support for getting VF port and node GUIDs in netlink ifinfo messages, but their size was not taken into consideration in the function that allocates the netlink message, causing the following warning when a netlink message is filled with many VF port and node GUIDs:  # echo 64 \u003e /sys/bus/pci/devices/0000\\:08\\:00.0/sriov_numvfs  # ip link show dev ib0  RTNETLINK answers: Message too long  Cannot send link get request: Message too long  Kernel warning:   ------------[ cut here ]------------  WARNING: CPU: 2 PID: 1930 at net/core/rtnetlink.c:4151 rtnl_getlink+0x586/0x5a0  Modules linked in: xt_conntrack xt_MASQUERADE nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter overlay mlx5_ib macsec mlx5_core tls rpcrdma rdma_ucm ib_uverbs ib_iser libiscsi scsi_transport_iscsi ib_umad rdma_cm iw_cm ib_ipoib fuse ib_cm ib_core  CPU: 2 UID: 0 PID: 1930 Comm: ip Not tainted 6.14.0-rc2+ #1  Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014  RIP: 0010:rtnl_getlink+0x586/0x5a0  Code: cb 82 e8 3d af 0a 00 4d 85 ff 0f 84 08 ff ff ff 4c 89 ff 41 be ea ff ff ff e8 66 63 5b ff 49 c7 07 80 4f cb 82 e9 36 fc ff ff \u003c0f\u003e 0b e9 16 fe ff ff e8 de a0 56 00 66 66 2e 0f 1f 84 00 00 00 00  RSP: 0018:ffff888113557348 EFLAGS: 00010246  RAX: 00000000ffffffa6 RBX: ffff88817e87aa34 RCX: dffffc0000000000  RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88817e87afb8  RBP: 0000000000000009 R08: ffffffff821f44aa R09: 0000000000000000  R10: ffff8881260f79a8 R11: ffff88817e87af00 R12: ffff88817e87aa00  R13: ffffffff8563d300 R14: 00000000ffffffa6 R15: 00000000ffffffff  FS:  00007f63a5dbf280(0000) GS:ffff88881ee00000(0000) knlGS:0000000000000000  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  CR2: 00007f63a5ba4493 CR3: 00000001700fe002 CR4: 0000000000772eb0  DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  PKRU: 55555554  Call Trace:   \u003cTASK\u003e   ? __warn+0xa5/0x230   ? rtnl_getlink+0x586/0x5a0   ? report_bug+0x22d/0x240   ? handle_bug+0x53/0xa0   ? exc_invalid_op+0x14/0x50   ? asm_exc_invalid_op+0x16/0x20   ? skb_trim+0x6a/0x80   ? rtnl_getlink+0x586/0x5a0   ? __pfx_rtnl_getlink+0x10/0x10   ? rtnetlink_rcv_msg+0x1e5/0x860   ? __pfx___mutex_lock+0x10/0x10   ? rcu_is_watching+0x34/0x60   ? __pfx_lock_acquire+0x10/0x10   ? stack_trace_save+0x90/0xd0   ? filter_irq_stacks+0x1d/0x70   ? kasan_save_stack+0x30/0x40   ? kasan_save_stack+0x20/0x40   ? kasan_save_track+0x10/0x30   rtnetlink_rcv_msg+0x21c/0x860   ? entry_SYSCALL_64_after_hwframe+0x76/0x7e   ? __pfx_rtnetlink_rcv_msg+0x10/0x10   ? arch_stack_walk+0x9e/0xf0   ? rcu_is_watching+0x34/0x60   ? lock_acquire+0xd5/0x410   ? rcu_is_watching+0x34/0x60   netlink_rcv_skb+0xe0/0x210   ? __pfx_rtnetlink_rcv_msg+0x10/0x10   ? __pfx_netlink_rcv_skb+0x10/0x10   ? rcu_is_watching+0x34/0x60   ? __pfx___netlink_lookup+0x10/0x10   ? lock_release+0x62/0x200   ? netlink_deliver_tap+0xfd/0x290   ? rcu_is_watching+0x34/0x60   ? lock_release+0x62/0x200   ? netlink_deliver_tap+0x95/0x290   netlink_unicast+0x31f/0x480   ? __pfx_netlink_unicast+0x10/0x10   ? rcu_is_watching+0x34/0x60   ? lock_acquire+0xd5/0x410   netlink_sendmsg+0x369/0x660   ? lock_release+0x62/0x200   ? __pfx_netlink_sendmsg+0x10/0x10   ? import_ubuf+0xb9/0xf0   ? __import_iovec+0x254/0x2b0   ? lock_release+0x62/0x200   ? __pfx_netlink_sendmsg+0x10/0x10   ____sys_sendmsg+0x559/0x5a0   ? __pfx_____sys_sendmsg+0x10/0x10   ? __pfx_copy_msghdr_from_user+0x10/0x10   ? rcu_is_watching+0x34/0x60   ? do_read_fault+0x213/0x4a0   ? rcu_is_watching+0x34/0x60   ___sys_sendmsg+0xe4/0x150   ? __pfx____sys_sendmsg+0x10/0x10   ? do_fault+0x2cc/0x6f0   ? handle_pte_fault+0x2e3/0x3d0   ? __pfx_handle_pte_fault+0x10/0x10 ---truncated---","modified":"2026-09-01T16:06:10.773047274Z","published":"2025-04-16T15:16:01.700Z","upstream":["CVE-2025-22075"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2025-22075"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.135-1"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.115-1","6.1.119-1","6.1.123-1","6.1.124-1","6.1.128-1","6.1.129-1","6.1.133-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-22075.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.25-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-22075.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.25-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-22075.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}