CVE-2025-21890

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-smp-DEV #1697

Description The issue is related to the idpf rx rsc() function in the Linux kernel, which uses skb transport offset(skb) before the transport header is set. This triggers a warning for CONFIG DEBUG NET=y builds. The problem is caused by the idpf vport splitq napi poll function, which is linked to the idpf module.

Recommendations For Linux kernel versions prior to 6.14.0-smp-DEV #1697, consider updating to a newer version that includes the fix for the idpf rx rsc() function. As a temporary workaround, consider disabling the idpf module to minimize the risk of exploitation.