CVE-2025-37860

Source
https://cve.org/CVERecord?id=CVE-2025-37860
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37860.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-37860
Downstream
AZL (1)
BELL (1)
CGA (144)
DEBIAN (1)
ECHO (1)
OESA (2)
ROOT (3)
SUSE (10)
UBUNTU (1)
Related
Published
2025-04-18T07:01:28Z
Modified
2026-10-22T02:47:49Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
sfc: fix NULL dereferences in ef100_process_design_param()
Details

In the Linux kernel, the following vulnerability has been resolved:

sfc: fix NULL dereferences in ef100_process_design_param()

Since cited commit, ef100_probe_main() and hence also ef100_check_design_params() run before efx->net_dev is created; consequently, we cannot netif_set_tso_max_size() or _segs() at this point. Move those netif calls to ef100_probe_netdev(), and also replace netif_err within the design params code with pci_err.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37860.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
98ff4c7c8ac7f5339aac6114105395fea19f992e
Fixed
a9703b006a475f474a571801ad3dd9b1bda35273
Fixed
f21623b8446735b5e2ac5f8ee69b8743177d7b19
Fixed
e56391011381d6d029da377a65ac314cb3d5def2
Fixed
8241ecec1cdc6699ae197d52d58e76bddd995fa5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37860.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.57
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37860.json"