Null Pointer Dereference Vulnerability in Linux Kernel's MLX5 Network Driver

CVE-2025-37888

What is CVE-2025-37888?

A vulnerability in the MLX5 network driver of the Linux kernel has been identified, which allows for a potential null pointer dereference. This flaw occurs when the functions mlx5_create_inner_ttc_table() and mlx5_create_ttc_table() fail to check the return value of mlx5_get_flow_namespace(), leading to instability and crashes in applications relying on network operations. A patch has been implemented to address this issue, enhancing the overall stability and security of the Linux kernel's networking capabilities.

References