Linux Kernel Memory Access Vulnerability in Mellanox Device Drivers

CVE-2025-38645

What is CVE-2025-38645?

A memory access vulnerability exists in the Mellanox device driver within the Linux kernel due to inadequate handling of device memory pointers. Specifically, a NULL check should be implemented prior to accessing device memory to avert potential crashes arising from failed memory allocations. This flaw highlights the importance of rigorous memory management practices within kernel modules to ensure system stability and prevent operational disruptions.

References