Linux Kernel Vulnerability Affecting Null Pointer Dereference in SMC

CVE-2025-39857

What is CVE-2025-39857?

A vulnerability in the Linux Kernel specifically impacts the SMC (Shared Memory Communications) component. It occurs due to a NULL pointer dereference in the function 'smc_ib_is_sg_need_sync'. This defect can lead to system instability if a software RoCE device is used, as the 'ibdev->dma_device' pointer may not be correctly initialized. This situation has been addressed by implementing additional NULL pointer checks to prevent potential exploitation and ensure system reliability.

References