CVE-2025-37860: sfc: fix NULL dereferences in ef100_process_design_param()
In the Linux kernel, the following vulnerability has been resolved:
sfc: fix NULL dereferences in ef100processdesignparam()
Since cited commit, ef100probemain() and hence also ef100checkdesignparams() run before efx->netdev is created; consequently, we cannot netifsettsomaxsize() or segs() at this point. Move those netif calls to ef100probenetdev(), and also replace netiferr within the design params code with pcierr.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37860?
CVE-2025-37860 is rated as a high severity vulnerability due to the potential for NULL dereference attacks in the Linux kernel.
How do I fix CVE-2025-37860?
To fix CVE-2025-37860, update your Linux kernel to the latest version where the vulnerability has been patched.
Which versions of the Linux kernel are affected by CVE-2025-37860?
CVE-2025-37860 affects various versions of the Linux kernel that do not include the security fix implemented in the relevant commits.
What is the impact of CVE-2025-37860 on system security?
The impact of CVE-2025-37860 may allow an attacker to exploit the NULL dereference, potentially leading to system crashes or denial of service.
Has CVE-2025-37860 been publicly disclosed?
Yes, CVE-2025-37860 has been publicly disclosed in security advisories and through the kernel developer community.