Security tracker / CVE-2025-22060

CVE-2025-22060

net: mvpp2: Prevent parser TCAM memory corruption

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 3f518509dedc ("ethernet: Add new driver for Marvell Armada 375
 carnil> network unit"). Vulnerable versions: 3.17.

Bugs

Status

Branch	Status
upstream	released (6.15-rc1) [96844075226b49af25a69a1d084b648ec2d9b08d]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.13-upstream-stable	released (6.13.11) [e64e9b6e86b39db3baa576fd73da73533b54cb2d]
6.12-upstream-stable	released (6.12.23) [fcbfb54a0269875cf3cd6a2bff4f85a2e0a0b552]
6.6-upstream-stable	released (6.6.87) [5b0ae1723a7d9574ae1aee7d9cf9757a30069865]
6.1-upstream-stable	released (6.1.134) [b3f48a41a00d6d8d9c6fe09ae47dd21c8c1c8b03]
5.10-upstream-stable	needed
sid	released (6.12.25-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.135-1)
5.10-bullseye-security	needed