CVE-2025-22060 net: mvpp2: Prevent parser TCAM memory corruption
A race condition in the Marvell mvpp2 network driver can corrupt parser memory, causing the system to drop all incoming unicast traffic.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-22060?
CVE-2025-22060 is a medium-severity vulnerability in Linux kernel, published on 16 Apr 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: mvpp2: Prevent parser TCAM memory corruption
Protect the parser TCAM/SRAM memory, and the cached (shadow) SRAM information, from concurrent modifications.
Both the TCAM and SRAM tables are indirectly accessed by configuring an index register that selects the row to read or write to. This means that operations must be atomic in order to, e.g., avoid spreading writes across multiple rows. Since the shadow SRAM array is used to find free rows in the hardware table, it must also be protected in order to avoid TOCTOU errors where multiple cores allocate the same row.
This issue was detected in a situation where `mvpp2_set_rx_mode()` ran concurrently on two CPUs. In this particular case the MVPP2_PE_MAC_UC_PROMISCUOUS entry was corrupted, causing the classifier unit to drop all incoming unicast - indicated by the `rx_classifier_drops` counter.
Weakness: CWE-367
Which versions are affected by CVE-2025-22060?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-22060?
Apply the vendor's patch.
Is CVE-2025-22060 being exploited?
There is no known exploitation of CVE-2025-22060 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-22060, DEBIAN-CVE-2025-22060, GHSA-f5rg-cp58-cwjr, ROOT-OS-DEBIAN-11-CVE-2025-22060, ROOT-OS-UBUNTU-2404-CVE-2025-22060, UBUNTU-CVE-2025-22060.