CVE-2025-38683NULL Pointer Dereference in Linux

Severity
5.5MEDIUMNVD
OSV4.7
EPSS
0.0%
top 96.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 4
Latest updateFeb 24

Description

In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC to new namespace when NETDEV_REGISTER is received on netvsc NIC. During deletion of the namespace, default_device_exit_batch() >> default_device_exit_net() is called. When netvsc NIC is moved back and registered to the default namespace, it automatically brings VF NIC back to the default namespace. This will cause the default_device_exit_n

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

NVDlinux/linux_kernel4.19.3234.20+11
Debianlinux/linux_kernel< 5.10.244-1+3
CVEListV5linux/linux3eb6aa870057da9f1304db660f68b9c2eb7e856d3ca41ab55d23a0aa71661a5a56a8f06c11db90dc+11

Also affects: Debian Linux 11.0

Patches

🔴Vulnerability Details

11
OSV
linux-azure-fips vulnerabilities2025-10-21
OSV
linux-azure-fips vulnerabilities2025-10-14
OSV
linux-azure-5.15 vulnerabilities2025-10-14
OSV
linux-azure-6.8 vulnerabilities2025-10-14
OSV
linux-azure, linux-azure-5.4 vulnerabilities2025-10-13

📋Vendor Advisories

29
Ubuntu
Linux kernel (Xilinx) vulnerabilities2026-02-24
Ubuntu
Linux kernel (IBM) vulnerabilities2026-02-24
Ubuntu
Linux kernel (Low Latency) vulnerabilities2026-02-19
Ubuntu
Linux kernel (Low Latency NVIDIA) vulnerabilities2026-02-19
Ubuntu
Linux kernel (HWE) vulnerabilities2026-02-19
CVE-2025-38683 — NULL Pointer Dereference in Linux | cvebase