{"id":"DEBIAN-CVE-2025-38413","details":"In the Linux kernel, the following vulnerability has been resolved:  virtio-net: xsk: rx: fix the frame's length check  When calling buf_to_xdp, the len argument is the frame data's length without virtio header's length (vi-\u003ehdr_len). We check that len with  \txsk_pool_get_rx_frame_size() + vi-\u003ehdr_len  to ensure the provided len does not larger than the allocated chunk size. The additional vi-\u003ehdr_len is because in virtnet_add_recvbuf_xsk, we use part of XDP_PACKET_HEADROOM for virtio header and ask the vhost to start placing data from  \thard_start + XDP_PACKET_HEADROOM - vi-\u003ehdr_len not \thard_start + XDP_PACKET_HEADROOM  But the first buffer has virtio_header, so the maximum frame's length in the first buffer can only be  \txsk_pool_get_rx_frame_size() not \txsk_pool_get_rx_frame_size() + vi-\u003ehdr_len  like in the current check.  This commit adds an additional argument to buf_to_xdp differentiate between the first buffer and other ones to correctly calculate the maximum frame's length.","modified":"2026-08-27T23:05:29.899588018Z","published":"2025-07-25T14:15:33.017Z","upstream":["CVE-2025-38413"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2025-38413"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.37-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38413.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.37-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38413.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}