CVE-2025-21890

In the Linux kernel, the following vulnerability has been resolved: idpf: fix checksums set in idpfrxrsc idpfrxrsc uses skbtransportoffsetskb while the transport header is not set yet. This triggers the following warning for CONFIGDEBUGNET=y builds. DEBUGNETWARNONONCE!skbtransportheaderwassetskb...

CVE-2025-21890

CVE-2025-21890 affects the Linux kernel (idpf driver). The root cause is in idpf_rx_rsc(): it uses skb_transport_offset(skb) before the transport header is set, causing incorrect checksums and triggering a CONFIG_DEBUG_NET warning. The issue has been fixed in the kernel with the referenced commit...