CVE-2025-37888

net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() Add NULL check for mlx5_get_flow_namespace() returns in mlx5_create_inner_ttc_table() and mlx5_create_ttc_table() to prevent NULL pointer dereference.

N/A

CVSS

Severity:

EPSS 0.02%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/0b682680b12b08cd62b113ea92b2938195de1dfe
https://git.kernel.org/stable/c/ecd9d2647ddb4f42a121de648e48659ae1856c39
https://git.kernel.org/stable/c/91037037ee3d611ce17f39d75f79c7de394b122a

Frequently Asked Questions

What is the severity of CVE-2025-37888?: CVE-2025-37888 has not yet been assigned a CVSS score.
How to fix CVE-2025-37888?: To fix CVE-2025-37888, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-37888 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-37888 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-37888?: CVE-2025-37888 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.