CVE-2025-37820

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been identified, specifically in the xen-netfront component. The xdp convert buff to frame() function may return NULL if it fails to convert the XDP buffer into an XDP frame due to memory constraints, internal errors, or invalid data. If the result is not checked for NULL, it may lead to a NULL pointer dereference, causing crashes, data corruption, or undefined behavior. Additionally, on XDP redirect failure, the associated page must be released explicitly if it was previously retained via get page(), otherwise, it may result in a memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.