CVE-2025-38452: net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe()
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: rtsn: Fix a null pointer dereference in rtsnprobe()
Add check for the return value of rcargen4ptpalloc() to prevent potential null pointer dereference.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In rtsn_probe(), check the return value of rcar_gen4_ptp_alloc() before using it to prevent a potential null pointer dereference.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38452?
CVE-2025-38452 has a medium severity rating due to potential null pointer dereference risks.
What systems are affected by CVE-2025-38452?
CVE-2025-38452 affects the Linux kernel, specifically the ethernet subsystem.
How do I fix CVE-2025-38452?
To fix CVE-2025-38452, update the Linux kernel to the patched version that addresses the null pointer dereference.
What is the nature of the vulnerability in CVE-2025-38452?
CVE-2025-38452 involves a null pointer dereference in the rtsn_probe() function of the Linux kernel.
When was CVE-2025-38452 resolved?
CVE-2025-38452 was resolved in a recent Linux kernel update.