CVE-2025-39814
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/09/2025
Last modified:
16/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ice: fix NULL pointer dereference in ice_unplug_aux_dev() on reset<br />
<br />
Issuing a reset when the driver is loaded without RDMA support, will<br />
results in a crash as it attempts to remove RDMA&#39;s non-existent auxbus<br />
device:<br />
echo 1 > /sys/class/net//device/reset<br />
<br />
BUG: kernel NULL pointer dereference, address: 0000000000000008<br />
...<br />
RIP: 0010:ice_unplug_aux_dev+0x29/0x70 [ice]<br />
...<br />
Call Trace:<br />
<br />
ice_prepare_for_reset+0x77/0x260 [ice]<br />
pci_dev_save_and_disable+0x2c/0x70<br />
pci_reset_function+0x88/0x130<br />
reset_store+0x5a/0xa0<br />
kernfs_fop_write_iter+0x15e/0x210<br />
vfs_write+0x273/0x520<br />
ksys_write+0x6b/0xe0<br />
do_syscall_64+0x79/0x3b0<br />
entry_SYSCALL_64_after_hwframe+0x76/0x7e<br />
<br />
ice_unplug_aux_dev() checks pf->cdev_info->adev for NULL pointer, but<br />
pf->cdev_info will also be NULL, leading to the deref in the trace above.<br />
<br />
Introduce a flag to be set when the creation of the auxbus device is<br />
successful, to avoid multiple NULL pointer checks in ice_unplug_aux_dev().