CVE-2025-22075

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

rtnetlink: Allocate vfinfo size for VF GUIDs when supported

Commit 30aad41721e0 ("net/core: Add support for getting VF GUIDs")

added support for getting VF port and node GUIDs in netlink ifinfo

messages, but their size was not taken into consideration in the

function that allocates the netlink message, causing the following

warning when a netlink message is filled with many VF port and node

GUIDs:

# echo 64 > /sys/bus/pci/devices/0000\:08\:00.0/sriov_numvfs

# ip link show dev ib0

RTNETLINK answers: Message too long

Cannot send link get request: Message too long

Kernel warning:

------------[ cut here ]------------

WARNING: CPU: 2 PID: 1930 at net/core/rtnetlink.c:4151 rtnl_getlink+0x586/0x5a0

Modules linked in: xt_conntrack xt_MASQUERADE nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter overlay mlx5_ib macsec mlx5_core tls rpcrdma rdma_ucm ib_uverbs ib_iser libiscsi scsi_transport_iscsi ib_umad rdma_cm iw

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References