Null Pointer Dereference Vulnerability in Linux Kernel's s390/sclp Console Initialization

CVE-2025-37883

Summary

A vulnerability in the Linux kernel related to the s390/sclp console initialization has been identified, which could potentially lead to a null pointer dereference. This issue arises from a lack of checks on the return value of the get_zeroed_page() function within sclp_console_init(). To mitigate this, a proper validation mechanism has been introduced in the code to prevent crashes caused by null references. Additionally, a memory leak previously triggered by the loop allocation has been addressed with a new memory management helper function, ensuring that unused memory is appropriately released.

References