net: xilinx: axienet: Add error handling for RX metadata pointer retrieval

{
  "id": "8b084259bcaab16a4b6656f71516f08745ab21b53f18b5f523eb241f1b670eaa",
  "url": "https://osv.dev/vulnerability/CVE-2025-39897",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "net: xilinx: axienet: Add error handling for RX metadata pointer retrieval",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval Add proper error checking for dmaengine_desc_get_metadata_ptr() which can return an error pointer and lead to potential crashes or undefined behaviour if the pointer retrieval fails. Properly handle the error by unmapping DMA buffer, freeing the skb and returning early to prevent further processing with invalid data.",
    "evidence": "osv:CVE-2025-39897",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.12.46",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.16.6",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CVE-2025-39897",
      "aliases": [
        "CVE-2025-39897"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "6a91b846af85a24241decd686269e8e038eb13d1"
                },
                {
                  "fixed": "d0ecda6fdd840b406df6617b003b036f65dd8926"
                },
                {
                  "fixed": "92e2fc92bc4eb2bc0e84404316fbc02ddd0a3196"
                },
                {
                  "fixed": "8bbceba7dc5090c00105e006ce28d1292cfda8dd"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39897.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.8.0"
                },
                {
                  "fixed": "6.12.46"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.16.6"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39897.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:40.077748797Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/8bbceba7dc5090c00105e006ce28d1292cfda8dd",
        "https://git.kernel.org/stable/c/92e2fc92bc4eb2bc0e84404316fbc02ddd0a3196",
        "https://git.kernel.org/stable/c/d0ecda6fdd840b406df6617b003b036f65dd8926",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39897.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-39897",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39897.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-39897",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 507744,
  "published_at": "2025-10-01T07:42:45.593+00:00"
}