PT-2025-14356 · Linux+6 · Linux Kernel+6
Publicado
2025-03-07
·
Atualizado
2026-04-20
·
CVE-2025-21975
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel (affected versions not specified)
Description
A NULL pointer dereference issue has been identified in the Linux kernel's MLX5 network driver. The problem arises in the
mlx5 chains create table() function, where the return values of mlx5 get fdb sub ns() and mlx5 get flow namespace() are not properly checked. If either function fails, it can lead to a NULL pointer dereference. To prevent this, the function should log an error message using mlx5 core warn() and return an error pointer.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Debian
Linux Kernel
Linuxmint
Red Os
Suse
Ubuntu