Null Pointer Dereference in Linux Kernel Affecting Storage Stack Functionality

CVE-2025-38695

What is CVE-2025-38695?

A critical vulnerability in the Linux kernel's storage stack can lead to a null pointer dereference and potential system instability. This issue arises during cleanup routines of the lpfc_vport structure if the initialization of hardware queues fails. When the function lpfc_sli4_read_rev() does not execute properly, the cleanup attempts to operate on uninitialized hardware queues, leading to dereferencing null pointers. A fix has been implemented to add checks for null pointers before proceeding with cleanup, effectively preventing possible system failures and enhancing overall software stability.

References