Null Pointer Dereference in TI SoCs Ethernet Driver

CVE-2025-39856

What is CVE-2025-39856?

A vulnerability was identified in the Linux kernel related to the ethernet driver for Texas Instruments System on Chips (SoCs) utilizing the CPSW2G instance. During the TX completion packet stage, if no TX packets were processed, the driver attempts to access an uninitialized ndev, leading to a null pointer dereference. This flaw can cause a kernel crash, potentially compromising system stability. The vulnerability has been addressed by implementing a check on the number of TX packets processed, ensuring that ndev is accessed only when appropriately initialized.

References