CVEvulnerability
CVE-2025-38664
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-08-22
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
In the Linux kernel, the following vulnerability has been resolved:
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
Add check for the return value of devm_kmemdup()
to prevent potential null pointer dereference.
Affected configurations
• linux linux kernel (>= 5.4 < 5.4.297)
• linux linux kernel (>= 5.5 < 5.10.241)
• linux linux kernel (>= 5.11 < 5.15.190)
• linux linux kernel (>= 5.16 < 6.1.148)
• linux linux kernel (>= 6.2 < 6.6.101)
• linux linux kernel (>= 6.7 < 6.12.41)
• linux linux kernel (>= 6.13 < 6.15.9)
• linux linux kernel 6.16
• debian debian linux 11.0
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://git.kernel.org/stable/c/0fde7dccbf4c8a6d7940ecaf4c3d80a12f405dd7 Patch
- https://git.kernel.org/stable/c/1c30093d58cd3d02d8358e2b1f4a06a0aae0bf5b Patch
- https://git.kernel.org/stable/c/3028f2a4e746b499043bbb8ab816f975473a0535 Patch
- https://git.kernel.org/stable/c/35370d3b44efe194fd5ad55bac987e629597d782 Patch
- https://git.kernel.org/stable/c/435462f8ab2b9c5340a5414ce02f70117d0cfede Patch
- https://git.kernel.org/stable/c/4ff12d82dac119b4b99b5a78b5af3bf2474c0a36 Patch
- https://git.kernel.org/stable/c/6d640a8ea62435a7f6f89869bee4fa99423d07ca Patch
- https://git.kernel.org/stable/c/7c5a13c76dd37e9e4f8d48b87376a54f4399ce15 Patch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Third Party Advisory