CVE-2025-38122
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38122
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38122.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-38122
- Downstream
- Related
- Published
- 2025-07-03T09:15:26Z
- Modified
- 2025-08-12T21:01:17Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
gve: add missing NULL check for gveallocpending_packet() in TX DQO
gveallocpendingpacket() can return NULL, but gvetxaddskb_dqo() did not check for this case before dereferencing the returned pointer.
Add a missing NULL check to prevent a potential NULL pointer dereference when allocation fails.
This improves robustness in low-memory scenarios.
- References
-
- https://git.kernel.org/stable/c/12c331b29c7397ac3b03584e12902990693bc248
- https://git.kernel.org/stable/c/2e5ead9e4e91fbe7799bd38afd8904543be1cb51
- https://git.kernel.org/stable/c/7f6265fce3bd424ded666481b37f106d7915fb6b
- https://git.kernel.org/stable/c/a0319c9b1648a67511e947a596ca86888451c0a7
- https://git.kernel.org/stable/c/ae98a1787fdcb0096d122bc80d93c3c7d812c04b
- https://git.kernel.org/stable/c/c741a7ef68023ac800054e2131c3e22e647fd7e3