CVE-2025-38341
kernel: eth: fbnic: avoid double free when failing to DMA-map FW msg
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 10, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
eth: fbnic: avoid double free when failing to DMA-map FW msg
The semantics are that caller of fbnic_mbx_map_msg() retains the ownership of the message on error. All existing callers dutifully free the page.
Statement
This vulnerability presents no risk to Red Hat Enterprise Linux as the fbnic network driver is not included in supported distributions. The flaw involves improper resource deallocation during direct memory access mapping failures within the driver firmware mailbox handling, which could theoretically cause kernel memory corruption on systems using this hardware. Because the affected driver code was merged in newer upstream kernels and is absent from Red Hat product kernels, customer environments are unaffected.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified