CVE-2025-38314

In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size returned by virtio_pci_admin_dev_parts_get() is 8 bytes larger than the actual result data size. This occurs because the result_sg_size field of the command is filled with the result length from virtqueue_get_buf(), which includes both the data size and an additional 8 bytes of status. This oversized result size causes two issues: 1. The state transferred to the destination includes 8 bytes of extra data at the end. 2. The allocated buffer in the kernel may be smaller than the returned size, leading to failures when reading beyond the allocated size. The commit fixes this by subtracting the status size from the result of virtqueue_get_buf(). This fix has been tested through live migrations with virtio-net, virtio-net-transitional, and virtio-blk devices.

• https://git.kernel.org/stable/c/920b6720bb63893b81516c0c45884a8350f9e4bfPatch
• https://git.kernel.org/stable/c/9ef41ebf787fcbde99ac404ae473f8467641f983Patch

Published

Jul 10, 2025

Last Modified

Jul 30, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38309In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3831Log files uploaded during troubleshooting by the Harmony SAS…9.8
• CVE-2025-38310In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38311In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38312In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38313In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38315In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38316In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38317In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38318In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38319In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3832The FuseDesk plugin for WordPress is vulnerable to Stored Cr…6.4