CVE-2025-39814
Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-476
Desreferencia a puntero nulo (NULL)
Fecha de publicación:
16/09/2025
Última modificación:
14/01/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ice: fix NULL pointer dereference in ice_unplug_aux_dev() on reset<br />
<br />
Issuing a reset when the driver is loaded without RDMA support, will<br />
results in a crash as it attempts to remove RDMA&#39;s non-existent auxbus<br />
device:<br />
echo 1 > /sys/class/net//device/reset<br />
<br />
BUG: kernel NULL pointer dereference, address: 0000000000000008<br />
...<br />
RIP: 0010:ice_unplug_aux_dev+0x29/0x70 [ice]<br />
...<br />
Call Trace:<br />
<br />
ice_prepare_for_reset+0x77/0x260 [ice]<br />
pci_dev_save_and_disable+0x2c/0x70<br />
pci_reset_function+0x88/0x130<br />
reset_store+0x5a/0xa0<br />
kernfs_fop_write_iter+0x15e/0x210<br />
vfs_write+0x273/0x520<br />
ksys_write+0x6b/0xe0<br />
do_syscall_64+0x79/0x3b0<br />
entry_SYSCALL_64_after_hwframe+0x76/0x7e<br />
<br />
ice_unplug_aux_dev() checks pf->cdev_info->adev for NULL pointer, but<br />
pf->cdev_info will also be NULL, leading to the deref in the trace above.<br />
<br />
Introduce a flag to be set when the creation of the auxbus device is<br />
successful, to avoid multiple NULL pointer checks in ice_unplug_aux_dev().
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.16 (incluyendo) | 6.16.5 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



