CVE-2025-21975

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21975
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: handle errors in mlx5_chains_create_table() In mlx5_chains_create_table(), the return value of mlx5_get_fdb_sub_ns() and mlx5_get_flow_namespace() must be checked to prevent NULL pointer dereferences. If either function fails, the function should log error message with mlx5_core_warn() and return error pointer.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/093b4aaec97ec048623e3fe1e516fc45a954d412 Patch
https://git.kernel.org/stable/c/1598307c914ba3d2642a2b03d1ff11efbdb7c6c2 Patch
https://git.kernel.org/stable/c/15bdd93728369b2c8942a8e5d549d4b5dc04a2d9 Patch
https://git.kernel.org/stable/c/1d34296409a519b4027750e3e82d9e19553a7398 Patch
https://git.kernel.org/stable/c/29c419c64e9b396baeda1d8713d2aa3ba7c0acf6 Patch
https://git.kernel.org/stable/c/637105ef0d46fe5beac15aceb431da3ec832bb00 Patch
https://git.kernel.org/stable/c/eab0396353be1c778eba1c0b5180176f04dd21ce Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*
History

30 Oct 2025, 20:52

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/093b4aaec97ec048623e3fe1e516fc45a954d412 - () https://git.kernel.org/stable/c/093b4aaec97ec048623e3fe1e516fc45a954d412 - Patch
References () https://git.kernel.org/stable/c/1598307c914ba3d2642a2b03d1ff11efbdb7c6c2 - () https://git.kernel.org/stable/c/1598307c914ba3d2642a2b03d1ff11efbdb7c6c2 - Patch
References () https://git.kernel.org/stable/c/15bdd93728369b2c8942a8e5d549d4b5dc04a2d9 - () https://git.kernel.org/stable/c/15bdd93728369b2c8942a8e5d549d4b5dc04a2d9 - Patch
References () https://git.kernel.org/stable/c/1d34296409a519b4027750e3e82d9e19553a7398 - () https://git.kernel.org/stable/c/1d34296409a519b4027750e3e82d9e19553a7398 - Patch
References () https://git.kernel.org/stable/c/29c419c64e9b396baeda1d8713d2aa3ba7c0acf6 - () https://git.kernel.org/stable/c/29c419c64e9b396baeda1d8713d2aa3ba7c0acf6 - Patch
References () https://git.kernel.org/stable/c/637105ef0d46fe5beac15aceb431da3ec832bb00 - () https://git.kernel.org/stable/c/637105ef0d46fe5beac15aceb431da3ec832bb00 - Patch
References () https://git.kernel.org/stable/c/eab0396353be1c778eba1c0b5180176f04dd21ce - () https://git.kernel.org/stable/c/eab0396353be1c778eba1c0b5180176f04dd21ce - Patch
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux

10 Apr 2025, 13:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/15bdd93728369b2c8942a8e5d549d4b5dc04a2d9 -
  • () https://git.kernel.org/stable/c/29c419c64e9b396baeda1d8713d2aa3ba7c0acf6 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5: gestión de errores en mlx5_chains_create_table(). En mlx5_chains_create_table(), se debe comprobar el valor de retorno de mlx5_get_fdb_sub_ns() y mlx5_get_flow_namespace() para evitar desreferencias de punteros nulos. Si alguna de las funciones falla, debe registrar un mensaje de error con mlx5_core_warn() y devolver un puntero de error.

01 Apr 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-01 16:15

Updated : 2025-10-30 20:52

NVD link : CVE-2025-21975

Mitre link : CVE-2025-21975

CVE.ORG link : CVE-2025-21975

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference