Security tracker / CVE-2025-37833

CVE-2025-37833

net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 7d5ec3d36123 ("PCI/MSI: Mask all unused MSI-X entries").
 carnil> Vulnerable versions: 4.4.282 4.9.281 4.14.245 4.19.205 5.4.142 5.10.60 5.13.12
 carnil> 5.14.

Bugs

Status

Branch	Status
upstream	released (6.15-rc3) [fbb429ddff5c8e479edcc7dde5a542c9295944e6]
7.2-upstream-stable	N/A "Fixed before branching point"
7.1-upstream-stable	N/A "Fixed before branching point"
7.0-upstream-stable	N/A "Fixed before branching point"
6.19-upstream-stable	N/A "Fixed before branching point"
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.14-upstream-stable	released (6.14.5) [64903e4849a71cf7f7c7e5d45225ccefc1280929]
6.12-upstream-stable	released (6.12.26) [c187aaa9e79b4b6d86ac7ba941e579ad33df5538]
6.6-upstream-stable	released (6.6.157) [0afd48b173bebd6d94769ba2c91bd7404b9eb3c9]
6.1-upstream-stable	released (6.1.188) [52a266008a9450e4222994666b4510c026fbb03c]
5.10-upstream-stable	needed
sid	released (6.12.27-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.190-1)
5.10-bullseye-security	needed