CVE-2025-22101: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-22101 is a vulnerability discovered in the Linux kernel's network subsystem, specifically in the libwx component's L4 checksum handling. The vulnerability was disclosed on April 16, 2025, affecting the Linux kernel's network stack implementation (NVD, Ubuntu).

The vulnerability stems from a bug in the L4 checksum handling where the hardware only supports L4 checksum offload for TCP/UDP/SCTP protocols. The issue occurs when the system sets Tx checksum flags for other protocols, resulting in a Tx ring hang condition. The CVSS v3.1 base score is 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), indicating a moderate severity level (Red Hat).

The vulnerability can cause a Tx ring hang condition when processing network packets with unsupported protocol checksums, potentially leading to network communication disruptions and system performance degradation (NVD).

The vulnerability requires local access to exploit, with low attack complexity and privileged access requirements, as indicated by the CVSS metrics. No known exploits in the wild have been reported (Red Hat).

The vulnerability has been fixed by implementing software checksum computation for packets using unsupported protocols. The fix has been integrated into various Linux distributions, with Ubuntu and Red Hat providing patches for affected versions. Some older versions of distributions like Ubuntu 22.04 LTS and earlier are not affected by this vulnerability (Ubuntu).