Null Pointer Dereference in Linux Kernel Ethernet Driver

CVE-2025-38452

What is CVE-2025-38452?

A vulnerability exists in the Ethernet driver of the Linux kernel, specifically within the rtsn_probe() function. The issue arises from a lack of checks on the return value of rcar_gen4_ptp_alloc(), which can lead to a null pointer dereference. This vulnerability can potentially cause system instability or crashes if certain conditions are met, allowing an attacker to exploit the weakness. The problem has been addressed in recent kernel updates by implementing appropriate checks to mitigate the risk.

References