CVE-2025-39858: eth: mlx4: Fix IS_ERR() vs NULL check bug in mlx4_en_create_rx_ring
In the Linux kernel, the following vulnerability has been resolved:
eth: mlx4: Fix ISERR() vs NULL check bug in mlx4encreaterxring
Replace NULL check with ISERR() check after calling pagepoolcreate() since this function returns error pointers (ERRPTR). Using NULL check could lead to invalid pointer dereference.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39858?
CVE-2025-39858 is classified as a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-39858?
To fix CVE-2025-39858, update your Linux kernel to the latest version that addresses this vulnerability.
What impact does CVE-2025-39858 have on systems?
CVE-2025-39858 can lead to instability in networking components within the Linux kernel if not mitigated.
Is CVE-2025-39858 being actively exploited?
As of now, there are no public reports indicating that CVE-2025-39858 is being actively exploited in the wild.
What versions of Linux kernel are affected by CVE-2025-39858?
CVE-2025-39858 affects specific versions of the Linux kernel prior to the latest patched release where the vulnerability has been corrected.