NULL Pointer Dereference in igb Driver Affecting Linux Kernel

CVE-2025-39875

What is CVE-2025-39875?

The igb driver in the Linux kernel has a vulnerability that leads to a NULL pointer dereference during the execution of the ethtool loopback test. This issue arises from the absence of an associated q_vector for the test ring as interrupts are not typically assigned to these test rings. The vulnerability was introduced following changes to the napi_id assignment in the function __xdp_rxq_info_reg(). To address this, the final parameter should be simplified to 0, ensuring correct functionality during the testing process.

References