You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve 2025 39805
About this tag
CVE-2025-39805 is a vulnerability in the Linux macb network driver, specifically an unregister_netdev call order issue in macb_remove. Microsoft has published an attestation stating that Azure Linux includes the affected open-source component and is potentially affected. The company has pledged to update the CVE/VEX record if additional Microsoft products are later identified as carriers. This CVE is relevant for users of Azure Linux and potentially other Microsoft products that incorporate the macb driver. Discussions on WindowsForum focus on the scope of Microsoft's attestation and the operational implications for customers assessing their exposure to this vulnerability.
A small, targeted fix in the Linux macb network driver — described in the CVE record as "net: macb: fix unregister_netdev call order in macb_remove" (CVE‑2025‑39805) — has prompted Microsoft to publish a product‑scoped attestation that Azure Linux includes the affected open‑source component and...