CVE-2025-71095 describes a crash vulnerability in the Linux kernel's stmmac network driver, specifically when handling zero-copy XDP_TX actions. This flaw occurs because the driver incorrectly assumes a page pool memory type for xdp_frame objects, even when they originate from an XSK pool, leading to invalid memory mappings and a kernel panic. While no CVSS score is available, the FAUCET Risk Score is 39/100, indicating a moderate risk. There is no evidence of active exploitation, nor is exploit code publicly available, though the vulnerability has garnered significant community discussion with 11 mentions and one media article.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 5.13.1, < 6.1.160CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.2, < 6.6.120CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.12.64CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.13, < 6.18.4CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
5.13CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:5.13:-:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Linux kernel (NVIDIA Tegra) vulnerabilities
May 11, 2026Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure FIPS) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
May 7, 2026Linux kernel (Raspberry Pi) vulnerabilities
May 7, 2026Linux kernel vulnerabilities
May 7, 2026Linux kernel (GCP) vulnerabilities
May 7, 2026Linux kernel (Low Latency NVIDIA) vulnerabilities
Apr 28, 2026Linux kernel (Raspberry Pi Real-time) vulnerabilities
Apr 23, 2026Linux kernel (Oracle) vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel (NVIDIA) vulnerabilities
Apr 17, 2026Linux kernel (FIPS) vulnerabilities
Apr 17, 2026Linux kernel (Real-time) vulnerabilities
Apr 17, 2026Linux kernel (GCP) vulnerabilities
Apr 17, 2026Linux kernel vulnerabilities
Apr 16, 2026Linux kernel vulnerabilities
Apr 16, 2026net: stmmac: fix the crash issue for zero copy XDP_TX action
Jan 13, 2026kernel: net: stmmac: fix the crash issue for zero copy XDP_TX action
Jan 13, 2026