CVE-2025-37860

MEDIUM EPSS 11.9%
Published Apr 18, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Apr 18, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100_process_design_param() Since cited commit, ef100_probe_main() and hence also ef100_check_design_params() run before efx->net_dev is created; consequently, we cannot netif_set_tso_max_size() or _segs() at this point. Move those netif calls to ef100_probe_netdev(), and also replace netif_err within the design params code with pci_err.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
11.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 1

VendorProductVersionRange
linuxlinux_kernel*≥6.0  –  <6.14.2

References 3

  • git.kernel.org https://git.kernel.org/stable/c/8241ecec1cdc6699ae197d52d58e76bddd995fa5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e56391011381d6d029da377a65ac314cb3d5def2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f21623b8446735b5e2ac5f8ee69b8743177d7b19

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/8241ecec1cdc6699ae197d52d58e76bddd995fa5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e56391011381d6d029da377a65ac314cb3d5def2
    Patch