PT-2025-14356 · Linux+6 · Linux Kernel+6
Published
2025-03-07
·
Updated
2026-04-20
·
CVE-2025-21975
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux Kernel (affected versions not specified)
Description
A NULL pointer dereference issue has been identified in the Linux kernel's MLX5 network driver. The problem arises in the
mlx5 chains create table() function, where the return values of mlx5 get fdb sub ns() and mlx5 get flow namespace() are not properly checked. If either function fails, it can lead to a NULL pointer dereference. To prevent this, the function should log an error message using mlx5 core warn() and return an error pointer.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linux Kernel
Linuxmint
Red Os
Suse
Ubuntu