CVE-2025-37860

MediumCVSS 5.5/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

sfc: fix NULL dereferences in ef100_process_design_param()

Since cited commit, ef100_probe_main() and hence also ef100_check_design_params() run before efx->net_dev is created; consequently, we cannot netif_set_tso_max_size() or _segs() at this point. Move those netif calls to ef100_probe_netdev(), and also replace netif_err within the design params code with pci_err.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= 98ff4c7c8ac7f5339aac6114105395fea19f992e, < 68ce59a1fdec97d94384499d3b5bc097fca0dd5d; >= 98ff4c7c8ac7f5339aac6114105395fea19f992e, < a9703b006a475f474a571801ad3dd9b1bda35273; >= 98ff4c7c8ac7f5339aac6114105395fea19f992e, < f21623b8446735b5e2ac5f8ee69b8743177d7b19; >= 98ff4c7c8ac7f5339aac6114105395fea19f992e, < e56391011381d6d029da377a65ac314cb3d5def2; >= 98ff4c7c8ac7f5339aac6114105395fea19f992e, < 8241ecec1cdc6699ae197d52d58e76bddd995fa5
LinuxLinux6.0

References

Timeline

Published
Apr 18, 2025
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-378617.8In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queuCVE-2025-378625.5In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidff_find_fields This funCVE-2025-378635.5In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper CVE-2025-378645.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: clean up FDB, MDB, VLAN entries on unbind As explained in maCVE-2025-378655.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsuppoCVE-2025-378665.5In the Linux kernel, the following vulnerability has been resolved: mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() A CVE-2025-378675.5In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Silence oversized kvmalloc() warning syzkaller triggered anCVE-2025-378685.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix notifier vs folio deadlock User is reporting what CVE-2025-378697.8In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent oCVE-2025-37876.5A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image HCVE-2025-378705.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: prevent hang on link training fail [Why] When link trCVE-2025-378715.5In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue dl_recall A deadlock
CVE-2025-37860: Medium severity, CVSS 5.5 | Vulnix