CVE-2025-39856

net: ethernet: ti: am65-cpsw-nuss: Fix null pointer dereference for ndev

State: Published
Severity: 5.5 Medium
Published: Sep 19, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: ti: am65-cpsw-nuss: Fix null pointer dereference for ndev

In the TX completion packet stage of TI SoCs with CPSW2G instance, which has single external ethernet port, ndev is accessed without being initialized if no TX packets have been processed. It results into null pointer dereference, causing kernel to crash. Fix this by having a check on the number of TX packets which have been processed.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	9a369ae3d1431a83589dde57323a04692dd7fc12 to before 485302905bada953aadfe063320d73c892a66cbbAffected 9a369ae3d1431a83589dde57323a04692dd7fc12 to before a6099f263e1f408bcc7913c9df24b0677164fc5dAffected
LinuxLinux	6.15Affected before 6.15Not affected 6.16.6 through 6.16.*Not affected 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.