CVE-2025-21975: net/mlx5: handle errors in mlx5_chains_create_table()
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: handle errors in mlx5chainscreatetable()
In mlx5chainscreatetable(), the return value of mlx5getfdbsubns() and mlx5getflownamespace() must be checked to prevent NULL pointer dereferences. If either function fails, the function should log error message with mlx5corewarn() and return error pointer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In mlx5_chains_create_table(), check the return values of mlx5_get_fdb_sub_ns() and mlx5_get_flow_namespace(); if either fails, log an error with mlx5_core_warn() and return an error pointer to prevent NULL pointer dereferences.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21975?
CVE-2025-21975 is classified as a medium severity vulnerability due to the potential for NULL pointer dereferences in the Linux kernel.
How do I fix CVE-2025-21975?
To fix CVE-2025-21975, update your Linux kernel to a version where this vulnerability has been resolved.
What are the potential impacts of CVE-2025-21975?
The potential impact of CVE-2025-21975 includes system instability or crashes due to NULL pointer dereferences.
Which versions of the Linux Kernel are affected by CVE-2025-21975?
CVE-2025-21975 affects multiple versions of the Linux kernel that include the flawed mlx5_chains_create_table() function.
Is CVE-2025-21975 related to network security?
Yes, CVE-2025-21975 is related to network security as it involves flow management functions within the Linux kernel.