CVE-2025-39897
kernel: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · October 1, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
net: xilinx: axienet: Add error handling for RX metadata pointer retrieval
Add proper error checking for dmaengine_desc_get_metadata_ptr() which can return an error pointer and lead to potential crashes or undefined behaviour if the pointer retrieval fails.
Properly handle the error by unmapping DMA buffer, freeing the skb and returning early to prevent further processing with invalid data.
Statement
This vulnerability does not affect supported Red Hat Enterprise Linux releases because the affected code is not present in our shipping kernels. The flaw exists within the network driver for Xilinx AXI Ethernet devices, which target specialized embedded hardware platforms rather than standard enterprise deployments. Consequently, systems running Red Hat enterprise products are not exposed to this potential denial of service or instability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified