CVE-2025-38664
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-22

Last updated on: 2025-11-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() Add check for the return value of devm_kmemdup() to prevent potential null pointer dereference.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-22
Last Modified
2025-11-03
Generated
2026-06-16
AI Q&A
2025-08-22
EPSS Evaluated
2026-06-14
NVD
CVE-2025-38664
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
linux kernel 6.1.153
linux kernel 5.10.244
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Mitigation Strategies

To mitigate this vulnerability, update the Linux kernel to a version that includes the fix for the null pointer dereference in ice_copy_and_init_pkg(), which adds a check for the return value of devm_kmemdup().

Executive Summary

This vulnerability is a null pointer dereference in the Linux kernel's ice driver, specifically in the function ice_copy_and_init_pkg(). It occurs because the return value of the devm_kmemdup() function was not checked, which could lead to dereferencing a null pointer and potentially causing a system crash or instability.

Impact Analysis

The vulnerability can cause a system crash or instability due to a null pointer dereference in the Linux kernel. This could lead to denial of service or unexpected behavior in systems using the affected ice driver.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-38664. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart