CVE-2025-38271 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 92.33%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedJul 10

Description

In the Linux kernel, the following vulnerability has been resolved: net: prevent a NULL deref in rtnl_create_link() At the time rtnl_create_link() is running, dev->netdev_ops is NULL, we must not use netdev_lock_ops() or risk a NULL deref if CONFIG_NET_SHAPER is defined. Use netif_set_group() instead of dev_set_group(). RIP: 0010:netdev_need_ops_lock include/net/netdev_lock.h:33 [inline] RIP: 0010:netdev_lock_ops include/net/netdev_lock.h:41 [inline] RIP: 0010:dev_set_group+0xc0/0x230 net/co…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDlinux/linux_kernel6.15 — 6.15.3
▶CVEListV5linux/linux7e4d784f5810bba76c4593791028e13cce4af547 — 8a29ae8428a5c26f0b4471c2057d9e9415c53109+2
▶debiandebian/linux

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2025-38271: In the Linux kernel, the following vulnerability has been resolved: net: prevent a NULL deref in rtnl_create_link() At the time rtnl_create_link() is↗2025-07-10
▶
GHSA
GHSA-v9wx-3hgc-c95m: In the Linux kernel, the following vulnerability has been resolved: net: prevent a NULL deref in rtnl_create_link() At the time rtnl_create_link() i↗2025-07-10
▶

📋Vendor Advisories

2
Red Hat
kernel: Linux kernel: Denial of Service via NULL dereference in rtnl_create_link()↗2025-07-10
▶
Debian
CVE-2025-38271: linux - In the Linux kernel, the following vulnerability has been resolved: net: preven...↗2025
▶
CVE-2025-38271 — NULL Pointer Dereference in Linux | cvebase