Riskcovery

CVE-2025-38122

gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO

State
Published
Severity
Not scored
Published
Jul 3, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO

gve_alloc_pending_packet() can return NULL, but gve_tx_add_skb_dqo() did not check for this case before dereferencing the returned pointer.

Add a missing NULL check to prevent a potential NULL pointer dereference when allocation fails.

This improves robustness in low-memory scenarios.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to before ae98a1787fdcb0096d122bc80d93c3c7d812c04bAffected
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to before 2e5ead9e4e91fbe7799bd38afd8904543be1cb51Affected
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to before 7f6265fce3bd424ded666481b37f106d7915fb6bAffected
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to before a0319c9b1648a67511e947a596ca86888451c0a7Affected
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to before c741a7ef68023ac800054e2131c3e22e647fd7e3Affected
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to before 12c331b29c7397ac3b03584e12902990693bc248Affected
LinuxLinux
  • 5.14Affected
  • before 5.14Not affected
  • 5.15.186 through 5.15.*Not affected
  • 6.1.142 through 6.1.*Not affected
  • 6.6.94 through 6.6.*Not affected
  • 6.12.34 through 6.12.*Not affected
  • 6.15.3 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.