---
id: CVE-2025-22106
title: 'vmxnet3: unregister xdp rxq info in the reset path'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  vmxnet3: unregister xdp rxq info in the reset path

  vmxnet3 does not unregister xdp rxq info in the
  vmxnet3_reset_work() code path as vmxnet3_rq_destroy()
  is not invoke…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 54f00cce11786742bd11e5e68c3bf85e6dc048c9 <
    a6157484bee3385a425d288a69e1eaf03232f5fc
  - >-
    Linux >= 54f00cce11786742bd11e5e68c3bf85e6dc048c9 <
    23da4e0bb2a38966d29db0ff90a8fe68fdfa1744
  - >-
    Linux >= 54f00cce11786742bd11e5e68c3bf85e6dc048c9 <
    9908541a9e235b7c5e2fbdd59910eaf9c32c3075
  - >-
    Linux >= 54f00cce11786742bd11e5e68c3bf85e6dc048c9 <
    0dd765fae295832934bf28e45dd5a355e0891ed4
  - Linux 6.6
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:38:49.842592Z'
published: '2025-04-16'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:41:50.593Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-22106'
references:
  - url: 'https://git.kernel.org/stable/c/a6157484bee3385a425d288a69e1eaf03232f5fc'
  - url: 'https://git.kernel.org/stable/c/23da4e0bb2a38966d29db0ff90a8fe68fdfa1744'
  - url: 'https://git.kernel.org/stable/c/9908541a9e235b7c5e2fbdd59910eaf9c32c3075'
  - url: 'https://git.kernel.org/stable/c/0dd765fae295832934bf28e45dd5a355e0891ed4'
tags:
  - cve.org
epss: 0.00202
epssPercentile: 0.10137
ingestedAt: '2026-11-05T22:38:31.861Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

vmxnet3: unregister xdp rxq info in the reset path

vmxnet3 does not unregister xdp rxq info in the
vmxnet3_reset_work() code path as vmxnet3_rq_destroy()
is not invoked in this code path. So, we get below message with a
backtrace.

Missing unregister, handled but fix driver
WARNING: CPU:48 PID: 500 at net/core/xdp.c:182
__xdp_rxq_info_reg+0x93/0xf0

This patch fixes the problem by moving the unregister
code of XDP from vmxnet3_rq_destroy() to vmxnet3_rq_cleanup().

## Affected

- `Linux >= 54f00cce11786742bd11e5e68c3bf85e6dc048c9 < a6157484bee3385a425d288a69e1eaf03232f5fc`
- `Linux >= 54f00cce11786742bd11e5e68c3bf85e6dc048c9 < 23da4e0bb2a38966d29db0ff90a8fe68fdfa1744`
- `Linux >= 54f00cce11786742bd11e5e68c3bf85e6dc048c9 < 9908541a9e235b7c5e2fbdd59910eaf9c32c3075`
- `Linux >= 54f00cce11786742bd11e5e68c3bf85e6dc048c9 < 0dd765fae295832934bf28e45dd5a355e0891ed4`
- `Linux 6.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.