CVE-2025-21975 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: handle errors in mlx5_chains_create_table() In mlx5_chains_create_table(), the return value of mlx5_get_fdb_sub_ns() and mlx5_get_flow_namespace() must be checked to prevent NULL pointer dereferences. If either function fails, the function should log error message with mlx5_core_warn() and return error pointer.
A vulnerability in the Linux kernel's handling of error conditions in the mlx5 networking component can lead to NULL pointer dereferences. This issue arises in the mlx5_chains_create_table() function, where the return values of mlx5_get_fdb_sub_ns() and mlx5_get_flow_namespace() are not properly checked. If either function fails, the error should be logged with mlx5_core_warn() and an error pointer should be returned.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.6, < 5.10.236 >= 5.11, < 5.15.180 >= 5.16, < 6.1.132 >= 6.2, < 6.6.84 >= 6.7, < 6.12.20 >= 6.13, < 6.13.8 6.14 rc1 6.14 rc2 6.14 rc3 6.14 rc4 6.14 rc5 6.14 rc6 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 3, 2025 | CVE Modified | CVE |
| Oct 30, 2025 | Initial Analysis | [email protected] |
| Apr 10, 2025 | CVE Modified | kernel.org |
| Apr 1, 2025 | New CVE Received | kernel.org |