Riskcovery

CVE-2025-39858

eth: mlx4: Fix IS_ERR() vs NULL check bug in mlx4_en_create_rx_ring

State
Published
Severity
5.5 Medium
Published
Sep 19, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

eth: mlx4: Fix IS_ERR() vs NULL check bug in mlx4_en_create_rx_ring

Replace NULL check with IS_ERR() check after calling page_pool_create() since this function returns error pointers (ERR_PTR). Using NULL check could lead to invalid pointer dereference.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 8533b14b3d65ee666ba31254787c1bdaee56d95a to before 7b77d8841a98a9f45c8a615222c698df8dec581cAffected
  • 8533b14b3d65ee666ba31254787c1bdaee56d95a to before e580beaf43d563aaf457f1c7f934002355ebfe7bAffected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.16.6 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.