medium5.5
CVE-2025-38645
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check device memory pointer before usage Add a NULL check before accessing device…
Impact
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check device memory pointer before usage Add a NULL check before accessing device memory to prevent a crash if dev->dm allocation in mlx5_init_once() fails.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linux | Linux Kernel | from 5.4 before 5.15.190 from 5.16 before 6.1.148 from 6.2 before 6.6.102 from 6.7 before 6.12.42 from 6.13 before 6.15.10 from 6.16 before 6.16.1 |
| Debian | Debian Linux | Version 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://git.kernel.org/stable/c/3046b011d368162b1b9ca9453eee0fea930e0a93
- https://git.kernel.org/stable/c/4249f1307932f1b6bbb8b7eba60d82f0b7e44430
- https://git.kernel.org/stable/c/62d7cf455c887941ed6f105cd430ba04ee0b6c9f
- https://git.kernel.org/stable/c/70f238c902b8c0461ae6fbb8d1a0bbddc4350eea
- https://git.kernel.org/stable/c/9053a69abfb5680c2a95292b96df5d204bc0776f
- https://git.kernel.org/stable/c/da899a1fd7c40e2e4302af1db7d0b8540fb22283
- https://git.kernel.org/stable/c/eebb225fe6c9103293807b8edabcbad59f9589bc
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html