EUVD-2025-22628

Malicious code in bioql PyPI...

The vulnerability of the xdp_linearize_page() function in the drivers/net/virtio_net.c module of Linux kernel allows a attacker to cause a service failure.

The vulnerability of the xdplinearizepage function in the drivers/net/virtionet.c module of Linux kernel systems is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-38375 virtio-net: ensure the received length does not exceed allocated size

In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdplinearizepage, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an...