Linux Kernel Vulnerability in Ethernet Driver Affecting Multiple Versions

CVE-2025-39858

What is CVE-2025-39858?

A vulnerability in the Linux kernel's Ethernet driver could lead to invalid pointer dereferences due to an erroneous NULL check. Specifically, this issue arises in the mlx4_en_create_rx_ring function after calling page_pool_create(), which can return error pointers (ERR_PTR). Failing to replace the NULL check with an IS_ERR() verification may result in system instability and unpredicted behavior.

References