In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: Check device memory pointer before usage
Add a NULL check before accessing device memory to prevent a crash if dev->dm allocation in mlx5initonce() fails.
[
{
"id": "CVE-2025-38645-1b199938",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eebb225fe6c9103293807b8edabcbad59f9589bc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"60025159601880190572771821092572847928",
"149697409445316990491422935977685466055",
"329015042456259146682839954518102457913",
"177015833629269431864300939849984408264",
"148384770363555628912969597552659104989"
]
},
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/main.c"
}
},
{
"id": "CVE-2025-38645-3ba3382a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eebb225fe6c9103293807b8edabcbad59f9589bc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"268697465573325201491704048357091664147",
"53105478734814269863597208102445974972",
"289553583470627690526116625808804433914",
"132247520294617023167049532843251430796"
]
},
"target": {
"file": "drivers/infiniband/hw/mlx5/dm.c"
}
},
{
"id": "CVE-2025-38645-708ebd6c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eebb225fe6c9103293807b8edabcbad59f9589bc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 3088.0,
"function_hash": "189816327942718882476008803533796155385"
},
"target": {
"function": "mlx5_init_once",
"file": "drivers/net/ethernet/mellanox/mlx5/core/main.c"
}
},
{
"id": "CVE-2025-38645-832a121f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eebb225fe6c9103293807b8edabcbad59f9589bc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"13879226337807587806053302109111369838",
"196917668422270840134005161357925640652",
"177258699006285662275569909336567653218",
"34312307911950975084177207174002245677",
"185349478513080901298818591360330214564",
"307394941343227124128276783382819714491",
"73158702816355456798303325064820293761",
"157653302047276665530241300337976847111"
]
},
"target": {
"file": "drivers/net/ethernet/mellanox/mlx5/core/lib/dm.c"
}
},
{
"id": "CVE-2025-38645-86c22e09",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eebb225fe6c9103293807b8edabcbad59f9589bc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1540.0,
"function_hash": "122155892773620992066887277405481421010"
},
"target": {
"function": "handle_alloc_dm_memic",
"file": "drivers/infiniband/hw/mlx5/dm.c"
}
},
{
"id": "CVE-2025-38645-c89c2feb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@eebb225fe6c9103293807b8edabcbad59f9589bc",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"length": 1566.0,
"function_hash": "319638164820127545547857572609050190951"
},
"target": {
"function": "mlx5_dm_create",
"file": "drivers/net/ethernet/mellanox/mlx5/core/lib/dm.c"
}
}
]