Riskcovery

CVE-2025-39875

igb: Fix NULL pointer dereference in ethtool loopback test

State
Published
Severity
5.5 Medium
Published
Sep 23, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

igb: Fix NULL pointer dereference in ethtool loopback test

The igb driver currently causes a NULL pointer dereference when executing the ethtool loopback test. This occurs because there is no associated q_vector for the test ring when it is set up, as interrupts are typically not added to the test rings.

Since commit 5ef44b3cb43b removed the napi_id assignment in __xdp_rxq_info_reg(), there is no longer a need to pass a napi_id to it. Therefore, simply use 0 as the last parameter.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 2c6196013f84651772388a86dfd4bb033d0c0d45 to before 473be7d39efd3be383e9c0c8e44b53508b4ffeb5Affected
  • 2c6196013f84651772388a86dfd4bb033d0c0d45 to before 75871a525a596ff4d16c4aebc0018f8d0923c9b1Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.16.8 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.