CVE-2025-37888

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()

Add NULL check for mlx5_get_flow_namespace() returns in mlx5_create_inner_ttc_table() and mlx5_create_ttc_table() to prevent NULL pointer dereference.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 137f3d50ad2a0f2e1ebe5181d6b32a5541786b99, < 0b682680b12b08cd62b113ea92b2938195de1dfe; >= 137f3d50ad2a0f2e1ebe5181d6b32a5541786b99, < ecd9d2647ddb4f42a121de648e48659ae1856c39; >= 137f3d50ad2a0f2e1ebe5181d6b32a5541786b99, < 91037037ee3d611ce17f39d75f79c7de394b122a
LinuxLinux6.10

References

Timeline

Published
May 9, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-378895.5In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platform_max as control value This reverCVE-2025-37895.4A vulnerability was found in baseweb JSite 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of thCVE-2025-378907.8In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qCVE-2025-378917.8In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conCVE-2025-378927.8In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftl_read_oob() In INFTL_findwritCVE-2025-378935.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix off-by-one error in build_prologue() Vincent reporCVE-2025-378945.5In the Linux kernel, the following vulnerability has been resolved: net: use sock_gen_put() when sk_state is TCP_TIME_WAIT It is possible CVE-2025-378955.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix error handling path in bnxt_init_chip() WARN_ON() is trigCVE-2025-378965.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-mem: Add fix to avoid divide error For some SPI flash memory CVE-2025-378975.5In the Linux kernel, the following vulnerability has been resolved: wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release plfxlc_macCVE-2025-378985.5In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix module loading without patchable function entriesCVE-2025-378997.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can
CVE-2025-37888: Medium severity, CVSS 5.5 | Vulnix