Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-37920— xsk: Fix race condition in AF_XDP generic RX path

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于xsk模块在共享umem模式下存在竞争条件，可能导致数据竞争。

CVSS 7.8 · High EPSS 0.16% · P5

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 16

VendorProduct Version RangeStatus
Linux Linux bf0bdd1343efbbf65b4d53aef1fce14acbd79d50< 975b372313dc018b9bd6cc0d85d188787054b19e affected
bf0bdd1343efbbf65b4d53aef1fce14acbd79d50< b6978c565ce33658543c637060852434b4248d30 affected
bf0bdd1343efbbf65b4d53aef1fce14acbd79d50< 65d3c570614b892257dc58a1b202908242ecf8fd affected
bf0bdd1343efbbf65b4d53aef1fce14acbd79d50< 75a240a3e8abf17b9e00b0ef0492b1bbaa932251 affected
bf0bdd1343efbbf65b4d53aef1fce14acbd79d50< a1356ac7749cafc4e27aa62c0c4604b5dca4983e affected
fd7c22ba7a0ad898b9ecf77dd53f5ccc48492e35 affected
8a090e3b73eaffe18e08ccc3fb5abecf6b0a9781 affected
5.1.20< 5.2 affected
… +8 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-37920

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
xsk: Fix race condition in AF_XDP generic RX path
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AF_XDP generic RX path Move rx_lock from xsk_socket to xsk_buff_pool. Fix synchronization for shared umem mode in generic RX path where multiple sockets share single xsk_buff_pool. RX queue is exclusive to xsk_socket, while FILL queue can be shared between multiple sockets. This could result in race condition where two CPU cores access RX path of two different sockets sharing the same umem. Protect both queues by acquiring spinlock in shared xsk_buff_pool. Lock contention may be minimized in the future by some per-thread FQ buffering. It's safe and necessary to move spin_lock_bh(rx_lock) after xsk_rcv_check(): * xs->pool and spinlock_init is synchronized by xsk_bind() -> xsk_is_bound() memory barriers. * xsk_rcv_check() may return true at the moment of xsk_release() or xsk_unbind_dev(), however this will not cause any data races or race conditions. xsk_unbind_dev() removes xdp socket from all maps and waits for completion of all outstanding rx operations. Packets in RX path will either complete safely or drop.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于xsk模块在共享umem模式下存在竞争条件，可能导致数据竞争。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux bf0bdd1343efbbf65b4d53aef1fce14acbd79d50 ~ 975b372313dc018b9bd6cc0d85d188787054b19e -
Linux Linux 5.3 -

II. Public POCs for CVE-2025-37920

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-37920

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-05-20 · 95 CVEs total

CVE-2025-37894 9.8 CRITICAL net: use sock_gen_put() when sk_state is TCP_TIME_WAIT
CVE-2025-37924 9.8 CRITICAL ksmbd: fix use-after-free in kerberos authentication
CVE-2025-37935 9.8 CRITICAL net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
CVE-2025-37959 9.4 CRITICAL bpf: Scrub packet on bpf_redirect_peer
CVE-2025-37926 8.8 HIGH ksmbd: fix use-after-free in ksmbd_session_rpc_open
CVE-2025-37899 8.8 HIGH ksmbd: fix use-after-free in session logoff
CVE-2025-37918 8.8 HIGH Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
CVE-2025-37944 8.8 HIGH wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
CVE-2025-37943 8.8 HIGH wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
CVE-2025-37947 8.8 HIGH ksmbd: prevent out-of-bounds stream writes by validating *pos
CVE-2025-37952 8.8 HIGH ksmbd: Fix UAF in __close_file_table_ids
CVE-2025-37956 8.8 HIGH ksmbd: prevent rename with empty string
CVE-2025-37957 8.8 HIGH KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
CVE-2025-37936 8.7 HIGH perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
CVE-2025-37973 8.1 HIGH wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
CVE-2025-37979 7.8 HIGH ASoC: qcom: Fix sc7280 lpass potential buffer overflow
CVE-2025-37901 7.8 HIGH irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
CVE-2025-37903 7.8 HIGH drm/amd/display: Fix slab-use-after-free in hdcp
CVE-2025-37923 7.8 HIGH tracing: Fix oob write in trace_seq_to_buffer()
CVE-2025-37921 7.8 HIGH vxlan: vnifilter: Fix unlocked deletion of default FDB entry

Showing top 20 of 95 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-37920

No comments yet

Leave a comment