CVE-2025-21975 — NULL Pointer Dereference in Linux
Severity
5.5MEDIUMNVD
OSV8.8OSV5.9OSV4.7OSV4.4
EPSS
0.1%
top 73.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 1
Latest updateOct 15
Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: handle errors in mlx5_chains_create_table()
In mlx5_chains_create_table(), the return value of mlx5_get_fdb_sub_ns()
and mlx5_get_flow_namespace() must be checked to prevent NULL pointer
dereferences. If either function fails, the function should log error
message with mlx5_core_warn() and return error pointer.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages6 packages
▶CVEListV5linux/linux39ac237ce00968545e7298faa9e07ecb7e440fb5 — 15bdd93728369b2c8942a8e5d549d4b5dc04a2d9+7