CVE-2025-38122

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/07/2025
Last modified:
03/07/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO<br /> <br /> gve_alloc_pending_packet() can return NULL, but gve_tx_add_skb_dqo()<br /> did not check for this case before dereferencing the returned pointer.<br /> <br /> Add a missing NULL check to prevent a potential NULL pointer<br /> dereference when allocation fails.<br /> <br /> This improves robustness in low-memory scenarios.

Impact