CVE-2025-37888

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-37888
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37888.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-37888
Downstream
Published
2025-05-09T06:45:50Z
Modified
2025-10-22T11:22:10.965615Z
Summary
net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()
Details

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix null-ptr-deref in mlx5create{inner,}ttctable()

Add NULL check for mlx5getflownamespace() returns in mlx5createinnerttctable() and mlx5createttctable() to prevent NULL pointer dereference.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
137f3d50ad2a0f2e1ebe5181d6b32a5541786b99
Fixed
0b682680b12b08cd62b113ea92b2938195de1dfe
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
137f3d50ad2a0f2e1ebe5181d6b32a5541786b99
Fixed
ecd9d2647ddb4f42a121de648e48659ae1856c39
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
137f3d50ad2a0f2e1ebe5181d6b32a5541786b99
Fixed
91037037ee3d611ce17f39d75f79c7de394b122a

Affected versions

v6.*

v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.14.1
v6.14.2
v6.14.3
v6.14.4
v6.15-rc1
v6.15-rc2
v6.9
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "id": "CVE-2025-37888-0d8b2b97",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecd9d2647ddb4f42a121de648e48659ae1856c39",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "39761966884579182253169646851145771408",
                "131057655448901649734741922522761380488",
                "98365248133879775091215733386626340635",
                "309772731285770236733355817461611523619",
                "39761966884579182253169646851145771408",
                "76814820672395366179202304450516653671",
                "258543951080422937491152198701642109124",
                "141971532911448267540190950695663488478"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c"
        }
    },
    {
        "id": "CVE-2025-37888-260605a1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0b682680b12b08cd62b113ea92b2938195de1dfe",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "39761966884579182253169646851145771408",
                "131057655448901649734741922522761380488",
                "98365248133879775091215733386626340635",
                "309772731285770236733355817461611523619",
                "39761966884579182253169646851145771408",
                "76814820672395366179202304450516653671",
                "258543951080422937491152198701642109124",
                "141971532911448267540190950695663488478"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c"
        }
    },
    {
        "id": "CVE-2025-37888-6f8c42a9",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0b682680b12b08cd62b113ea92b2938195de1dfe",
        "signature_version": "v1",
        "digest": {
            "length": 1138.0,
            "function_hash": "332040819238636216744587388805099737084"
        },
        "deprecated": false,
        "signature_type": "Function",
        "target": {
            "function": "mlx5_create_inner_ttc_table",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c"
        }
    },
    {
        "id": "CVE-2025-37888-9653a728",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91037037ee3d611ce17f39d75f79c7de394b122a",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "39761966884579182253169646851145771408",
                "131057655448901649734741922522761380488",
                "98365248133879775091215733386626340635",
                "309772731285770236733355817461611523619",
                "39761966884579182253169646851145771408",
                "76814820672395366179202304450516653671",
                "258543951080422937491152198701642109124",
                "141971532911448267540190950695663488478"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "signature_type": "Line",
        "target": {
            "file": "drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c"
        }
    },
    {
        "id": "CVE-2025-37888-a4b22936",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91037037ee3d611ce17f39d75f79c7de394b122a",
        "signature_version": "v1",
        "digest": {
            "length": 1203.0,
            "function_hash": "208721060751021282699647545049111875687"
        },
        "deprecated": false,
        "signature_type": "Function",
        "target": {
            "function": "mlx5_create_ttc_table",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c"
        }
    },
    {
        "id": "CVE-2025-37888-c8d51c0b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91037037ee3d611ce17f39d75f79c7de394b122a",
        "signature_version": "v1",
        "digest": {
            "length": 1138.0,
            "function_hash": "332040819238636216744587388805099737084"
        },
        "deprecated": false,
        "signature_type": "Function",
        "target": {
            "function": "mlx5_create_inner_ttc_table",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c"
        }
    },
    {
        "id": "CVE-2025-37888-eecf92b7",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0b682680b12b08cd62b113ea92b2938195de1dfe",
        "signature_version": "v1",
        "digest": {
            "length": 1203.0,
            "function_hash": "208721060751021282699647545049111875687"
        },
        "deprecated": false,
        "signature_type": "Function",
        "target": {
            "function": "mlx5_create_ttc_table",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c"
        }
    },
    {
        "id": "CVE-2025-37888-f0c578ee",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecd9d2647ddb4f42a121de648e48659ae1856c39",
        "signature_version": "v1",
        "digest": {
            "length": 1138.0,
            "function_hash": "332040819238636216744587388805099737084"
        },
        "deprecated": false,
        "signature_type": "Function",
        "target": {
            "function": "mlx5_create_inner_ttc_table",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c"
        }
    },
    {
        "id": "CVE-2025-37888-f20db506",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ecd9d2647ddb4f42a121de648e48659ae1856c39",
        "signature_version": "v1",
        "digest": {
            "length": 1203.0,
            "function_hash": "208721060751021282699647545049111875687"
        },
        "deprecated": false,
        "signature_type": "Function",
        "target": {
            "function": "mlx5_create_ttc_table",
            "file": "drivers/net/ethernet/mellanox/mlx5/core/lib/fs_ttc.c"
        }
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.10.0
Fixed
6.12.26
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.5