CVE-2025-37888 — NULL Pointer Dereference in Linux
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 84.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 9
Latest updateJul 8
Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
Add NULL check for mlx5_get_flow_namespace() returns in
mlx5_create_inner_ttc_table() and mlx5_create_ttc_table() to prevent
NULL pointer dereference.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages5 packages
▶CVEListV5linux/linux137f3d50ad2a0f2e1ebe5181d6b32a5541786b99 — 0b682680b12b08cd62b113ea92b2938195de1dfe+3
Patches
🔴Vulnerability Details
5GHSA▶
GHSA-hx3g-38mv-vv77: In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
Add NULL check↗2025-05-09
OSV▶
CVE-2025-37888: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() Add NULL check fo↗2025-05-09
📋Vendor Advisories
5Debian▶
CVE-2025-37888: linux - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: F...↗2025