Security tracker / CVE-2025-37920

CVE-2025-37920

xsk: Fix race condition in AF_XDP generic RX path

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in bf0bdd1343efb ("xdp: fix race on generic receive path").
 carnil> Vulnerable versions: 5.1.20 5.2.3 5.3.

Bugs

Status

Branch	Status
upstream	released (6.15-rc5) [a1356ac7749cafc4e27aa62c0c4604b5dca4983e]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.14-upstream-stable	released (6.14.6) [75a240a3e8abf17b9e00b0ef0492b1bbaa932251]
6.12-upstream-stable	released (6.12.28) [65d3c570614b892257dc58a1b202908242ecf8fd]
6.6-upstream-stable	needed
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.12.29-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	needed