CVE-2025-38645

net/mlx5: Check device memory pointer before usage

MEDIUM

5.5

CVSS Score

Published: August 22, 2025 at 04:00 PM UTC

Updated: June 17, 2026 at 09:17 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check device memory pointer before usage Add a NULL check before accessing device memory to prevent a crash if dev->dm allocation in mlx5_init_once() fails.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

5.16 ≤ v < 6.1.1485.4 ≤ v < 5.15.1905.4 ≤ v < 6.1.1485.4 ≤ v < 6.12.425.4 ≤ v < 6.15.105.4 ≤ v < 6.16.15.4 ≤ v < 6.175.4 ≤ v < 6.6.1026.13 ≤ v < 6.15.106.16 ≤ v < 6.16.16.2 ≤ v < 6.6.1026.7 ≤ v < 6.12.425.4c9b9dcb430b3cd0ad2b04c360c4e528d73430481

Vendor states this is fixed in 3046b011d368162b1b9ca9453eee0fea930e0a93 (fixed)

Vendor states this is fixed in 4249f1307932f1b6bbb8b7eba60d82f0b7e44430 (fixed)

Vendor states this is fixed in 62d7cf455c887941ed6f105cd430ba04ee0b6c9f (fixed)

Vendor states this is fixed in 70f238c902b8c0461ae6fbb8d1a0bbddc4350eea (fixed)

Vendor states this is fixed in 9053a69abfb5680c2a95292b96df5d204bc0776f (fixed)

Vendor states this is fixed in da899a1fd7c40e2e4302af1db7d0b8540fb22283 (fixed)

Vendor states this is fixed in eebb225fe6c9103293807b8edabcbad59f9589bc (fixed)

Vendor states this is fixed in 5.15.190 (unaffected)

Vendor states this is fixed in 5.4 (unaffected)

Vendor states this is fixed in 6.1.148 (unaffected)

Vendor states this is fixed in 6.12.42 (unaffected)

Vendor states this is fixed in 6.15.10 (unaffected)