NULL Pointer Dereference in Linux Kernel Ice Driver

CVE-2025-39814

What is CVE-2025-39814?

A vulnerability exists in the Linux kernel's ice driver that can lead to a NULL pointer dereference when a reset is issued without RDMA support. This occurs during the execution of the ice_unplug_aux_dev() function, which incorrectly handles the removal of the auxbus device when it is not present. The root cause lies in the absence of adequate checks for NULL pointers in the code, specifically in pf->cdev_info. When the driver attempts to reset, it can crash the system due to the NULL dereference, underscoring the importance of maintaining updated kernel versions that address this issue.

References