CVE-2025-37888

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37888
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() Add NULL check for mlx5_get_flow_namespace() returns in mlx5_create_inner_ttc_table() and mlx5_create_ttc_table() to prevent NULL pointer dereference.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0b682680b12b08cd62b113ea92b2938195de1dfe Patch
https://git.kernel.org/stable/c/91037037ee3d611ce17f39d75f79c7de394b122a Patch
https://git.kernel.org/stable/c/ecd9d2647ddb4f42a121de648e48659ae1856c39 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*
History

12 Nov 2025, 19:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0b682680b12b08cd62b113ea92b2938195de1dfe - () https://git.kernel.org/stable/c/0b682680b12b08cd62b113ea92b2938195de1dfe - Patch
References () https://git.kernel.org/stable/c/91037037ee3d611ce17f39d75f79c7de394b122a - () https://git.kernel.org/stable/c/91037037ee3d611ce17f39d75f79c7de394b122a - Patch
References () https://git.kernel.org/stable/c/ecd9d2647ddb4f42a121de648e48659ae1856c39 - () https://git.kernel.org/stable/c/ecd9d2647ddb4f42a121de648e48659ae1856c39 - Patch
CWE CWE-476
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

12 May 2025, 17:32

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5: Corregir null-ptr-deref en mlx5_create_{inner_,}ttc_table() Agregar comprobación NULL para los retornos de mlx5_get_flow_namespace() en mlx5_create_inner_ttc_table() y mlx5_create_ttc_table() para evitar la desreferencia del puntero NULL.

09 May 2025, 07:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-09 07:16

Updated : 2025-11-12 19:36

NVD link : CVE-2025-37888

Mitre link : CVE-2025-37888

CVE.ORG link : CVE-2025-37888

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference