CVE-2025-22106

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-04-16 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: unregister xdp rxq info in the reset path vmxnet3 does not unregister xdp rxq info in the vmxnet3_reset_work() code path as vmxnet3_rq_destroy() is not invoked in this code path. So, we get below message with a backtrace. Missing unregister, handled but fix driver WARNING: CPU:48 PID: 500 at net/core/xdp.c:182 __xdp_rxq_info_reg+0x93/0xf0 This patch fixes the problem by moving the unregister code of XDP from vmxnet3_rq_destroy() to vmxnet3_rq_cleanup().

Affected Software (6)

VendorProductVersion
Linux Linux 54f00cce11786742bd11e5e68c3bf85e6dc048c9 < a6157484bee3385a425d288a69e1eaf03232f5fc
Linux Linux 54f00cce11786742bd11e5e68c3bf85e6dc048c9 < 23da4e0bb2a38966d29db0ff90a8fe68fdfa1744
Linux Linux 54f00cce11786742bd11e5e68c3bf85e6dc048c9 < 9908541a9e235b7c5e2fbdd59910eaf9c32c3075
Linux Linux 54f00cce11786742bd11e5e68c3bf85e6dc048c9 < 0dd765fae295832934bf28e45dd5a355e0891ed4
Linux Linux 6.6
linux linux_kernel 6.6 – 6.6.108

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.20%
Raw Score 0.002020
Percentile 10.1%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00202
2026-11-05
0.00202

Intelligence Sources

mitre ref →
nvd ref →