NULL Pointer Vulnerability in Linux Kernel - Affects Ice Driver

CVE-2025-38526

What is CVE-2025-38526?

A vulnerability exists in the ice driver of the Linux kernel due to a lack of checks on the lag->upper_netdev variable, which can lead to a NULL pointer dereference error. When the function ice_lag_is_switchdev_running() is invoked outside its intended LAG event handler context, it may encounter a NULL reference. This oversight necessitates the implementation of an appropriate NULL check before dereferencing the variable to ensure system stability and security.

References