Security tracker / CVE-2025-38129

CVE-2025-38129

page_pool: Fix use-after-free in page_pool_recycle_in_ring

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in ff7d6b27f894 ("page_pool: refurbish version of page_pool code").
 carnil> Vulnerable versions: 4.18.

Bugs

Status

Branch	Status
upstream	released (6.16-rc1) [271683bb2cf32e5126c592b5d5e6a756fa374fd9]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.15-upstream-stable	released (6.15.3) [4ab8c0f8905c9c4d05e7f437e65a9a365573ff02]
6.12-upstream-stable	released (6.12.34) [e869a85acc2e60dc554579b910826a4919d8cd98]
6.6-upstream-stable	needed
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.12.35-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	needed