Linux Kernel NULL Dereference in sfc Driver: Affected by Design Parameter Issues

CVE-2025-37860

What is CVE-2025-37860?

A vulnerability in the Linux kernel related to the sfc driver can lead to NULL dereference issues. Specifically, the ef100_process_design_param function encounters a problem because calls to set parameters are made before the network device is created. This oversight prevents certain network functionalities from being configured properly, which could lead to operational instability. The issue has been addressed in a recent commit, ensuring that netif_set_tso_max_size and other related calls are handled in the appropriate context to prevent these errors.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References