CVE-2025-68302

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-68302
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68302.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-68302
Downstream
Related
Published
2025-12-16T15:06:20.420Z
Modified
2026-03-13T04:05:37.868076Z
Summary
net: sxgbe: fix potential NULL dereference in sxgbe_rx()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: sxgbe: fix potential NULL dereference in sxgbe_rx()

Currently, when skb is null, the driver prints an error and then dereferences skb on the next line.

To fix this, let's add a 'break' after the error message to switch to sxgberxrefill(), which is similar to the approach taken by the other drivers in this particular case, e.g. calxeda with xgmac_rx().

Found during a code review.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68302.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1edb9ca69e8a7988900fc0283e10550b5592164d
Fixed
ac171c3c755499c9f87fe30b920602255f8b5648
Fixed
18ef3ad1bb57dcf1a9ee61736039aedccf670b21
Fixed
46e5332126596a2ca791140feab18ce1fc1a3c86
Fixed
7fd789d6ea4915034eb6bcb72f6883c8151083e5
Fixed
45b5b4ddb8d6bea5fc1625ff6f163bbb125d49cc
Fixed
88f46c0be77bfe45830ac33102c75be7c34ac3f3
Fixed
f5bce28f6b9125502abec4a67d68eabcd24b3b17

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68302.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.15.0
Fixed
5.10.247
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.197
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.159
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.119
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.61
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.11

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68302.json"