CVE-2025-37888

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() Add NULL check for mlx5_get_flow_namespace() returns in mlx5_create_inner_ttc_table() and mlx5_create_ttc_table() to prevent NULL pointer dereference.

SeverityMedium

CVSS5.5

Exploit probability—

Product

Linux Kernel

PublishedMay 9, 2025

First seenMay 9, 2025

Weakness typeCWE-476NULL pointer dereference

How to fix

Update

linux linux_kernel6.12.26, 6.14.5 or later

Patches

git.kernel.org/stable/c/0b682680b12b08cd62b113ea92b2938195de1dfe
git.kernel.org/stable/c/91037037ee3d611ce17f39d75f79c7de394b122a
git.kernel.org/stable/c/ecd9d2647ddb4f42a121de648e48659ae1856c39

Affected products

Product	Affected versions	Fixed in
linux linux_kernel	6.10 ≤ v < 6.12.26, 6.13 ≤ v < 6.14.5, 6.15	6.12.26, 6.14.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.