CVE-2025-38341: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The semantics are that caller of fbnic_mbx_map_msg() retains the ownership of the message on error. All existing callers dutifully free the page.

Affected products

• Linux Linux Kernel: from 6.11, before 6.12.35 (fixed in 6.12.35); from 6.13, before 6.15.4 (fixed in 6.15.4); version 6.16 only

Published 2025-07-10. Last modified 2026-07-30.