CVE-2025-38341
Description
From CVE.org
In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The semantics are that caller of fbnic_mbx_map_msg() retains the ownership of the message on error. All existing callers dutifully free the page.
Statement
This vulnerability presents no risk to Red Hat Enterprise Linux as the fbnic network driver is not included in supported distributions. The flaw involves improper resource deallocation during direct memory access mapping failures within the driver firmware mailbox handling, which could theoretically cause kernel memory corruption on systems using this hardware. Because the affected driver code was merged in newer upstream kernels and is absent from Red Hat product kernels, customer environments are unaffected.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
