CVE-2025-38645

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Check device memory pointer before usage

Add a NULL check before accessing device memory to prevent a crash if
dev->dm allocation in mlx5_init_once() fails.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
UNKNOWN
---
LinuxCNA
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 10%
Debian logo
Debian Releases
Debian Product
Codename
linux
bullseye
vulnerable
bullseye (security)
vulnerable
bookworm
6.1.148-1
fixed
bookworm (security)
6.1.158-1
fixed
trixie
6.12.57-1
fixed
trixie (security)
6.12.48-1
fixed
forky
6.17.8-1
fixed
sid
6.17.8-1
fixed
linux-6.1
bullseye (security)
6.1.158-1~deb11u1
fixed
References
https://git.kernel.org/stable/c/3046b011d368162b1b9ca9453eee0fea930e0a93
https://git.kernel.org/stable/c/4249f1307932f1b6bbb8b7eba60d82f0b7e44430
https://git.kernel.org/stable/c/62d7cf455c887941ed6f105cd430ba04ee0b6c9f
https://git.kernel.org/stable/c/70f238c902b8c0461ae6fbb8d1a0bbddc4350eea
https://git.kernel.org/stable/c/9053a69abfb5680c2a95292b96df5d204bc0776f
https://git.kernel.org/stable/c/da899a1fd7c40e2e4302af1db7d0b8540fb22283
https://git.kernel.org/stable/c/eebb225fe6c9103293807b8edabcbad59f9589bc
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html