Answer in brief
CVE-2025-38439 records a Critical severity (CVSS 9.8) vulnerability in bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 9.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=f18c2b77b2e4eec2313d519ba125bd6a069513cf <e260f4d49370c85a4701d43c6d16b8c39f8b605f || >=f18c2b77b2e4eec2313d519ba125bd6a069513cf <16ae306602163fcb7ae83f2701b542e43c100cee || >=f18c2b77b2e4eec2313d519ba125bd6a069513cf <8d672a1a6bfc81fef9151925c9c0481f4acf4bec || >=f18c2b77b2e4eec2313d519ba125bd6a069513cf <f9eaf6d036075dc820520e1194692c0619b7297b || >=f18c2b77b2e4eec2313d519ba125bd6a069513cf <5909679a82cd74cf0343d9e3ddf4b6931aa7e613 || >=f18c2b77b2e4eec2313d519ba125bd6a069513cf <f154e41e1d9d15ab21300ba7bbf0ebb5cb3b9c2a || >=f18c2b77b2e4eec2313d519ba125bd6a069513cf <50dad9909715094e7d9ca25e9e0412b875987519 || >=f18c2b77b2e4eec2313d519ba125bd6a069513cf <3cdf199d4755d477972ee87110b2aebc88b3cfad | e260f4d49370c85a4701d43c6d16b8c39f8b605f, 16ae306602163fcb7ae83f2701b542e43c100cee, 8d672a1a6bfc81fef9151925c9c0481f4acf4bec, f9eaf6d036075dc820520e1194692c0619b7297b, 5909679a82cd74cf0343d9e3ddf4b6931aa7e613, f154e41e1d9d15ab21300ba7bbf0ebb5cb3b9c2a, 50dad9909715094e7d9ca25e9e0412b875987519, 3cdf199d4755d477972ee87110b2aebc88b3cfad |
| Linux/Linuxgeneric | 5.3 | Not reported |
Published upstream
Jul 25, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT When transmitting an XDP_REDIRECT packet, call dma_unmap_len_set() with the proper length instead of 0. This bug triggers this warning on a system with IOMMU enabled: WARNING: CPU: 36 PID: 0 at drivers/iommu/dma-iommu.c:842 __iommu_dma_unmap+0x159/0x170 RIP: 0010:__iommu_dma_unmap+0x159/0x170 Code: a8 00 00 00 00 48 c7 45 b0 00 00 00 00 48 c7 45 c8 00 00 00 00 48 c7 45 a0 ff ff ff ff 4c 89 45 b8 4c 89 45 c0 e9 77 ff ff ff <0f> 0b e9 60 ff ff ff e8 8b bf 6a 00 66 66 2e 0f 1f 84 00 00 00 00 RSP: 0018:ff22d31181150c88 EFLAGS: 00010206 RAX: 0000000000002000 RBX: 00000000e13a0000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ff22d31181150cf0 R08: ff22d31181150ca8 R09: 0000000000000000 R10: 0000000000000000 R11: ff22d311d36c9d80 R12: 0000000000001000 R13: ff13544d10645010 R14: ff22d31181150c90 R15: ff13544d0b2bac00 FS: 0000000000000000(0000) GS:ff13550908a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005be909dacff8 CR3: 0008000173408003 CR4: 0000000000f71ef0 PKRU: 55555554 Call Trace: <IRQ> ? show_regs+0x6d/0x80 ? __warn+0x89/0x160 ? __iommu_dma_unmap+0x159/0x170 ? report_bug+0x17e/0x1b0 ? handle_bug+0x46/0x90 ? exc_invalid_op+0x18/0x80 ? asm_exc_invalid_op+0x1b/0x20 ? __iommu_dma_unmap+0x159/0x170 ? __iommu_dma_unmap+0xb3/0x170 iommu_dma_unmap_page+0x4f/0x100 dma_unmap_page_attrs+0x52/0x220 ? srso_alias_return_thunk+0x5/0xfbef5 ? xdp_return_frame+0x2e/0xd0 bnxt_tx_int_xdp+0xdf/0x440 [bnxt_en] __bnxt_poll_work_done+0x81/0x1e0 [bnxt_en] bnxt_poll+0xd3/0x1e0 [bnxt_en]
Quoted source text, attributed separately from HOL analysis.