Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38122

gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO

Description

In the Linux kernel, the following vulnerability has been resolved: gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO gve_alloc_pending_packet() can return NULL, but gve_tx_add_skb_dqo() did not check for this case before dereferencing the returned pointer. Add a missing NULL check to prevent a potential NULL pointer dereference when allocation fails. This improves robustness in low-memory scenarios.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to < ae98a1787fdcb0096d122bc80d93c3c7d812c04baffected
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to < 2e5ead9e4e91fbe7799bd38afd8904543be1cb51affected
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to < 7f6265fce3bd424ded666481b37f106d7915fb6baffected
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to < a0319c9b1648a67511e947a596ca86888451c0a7affected
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to < c741a7ef68023ac800054e2131c3e22e647fd7e3affected
  • a57e5de476be0b4b7f42beb6a21c19ad9c577aa3 to < 12c331b29c7397ac3b03584e12902990693bc248affected

Linux Linux

Default version status: affected

  • 5.14affected
  • 0 to < 5.14unaffected
  • 5.15.186 to ≤ 5.15.*unaffected
  • 6.1.142 to ≤ 6.1.*unaffected
  • 6.6.94 to ≤ 6.6.*unaffected
  • 6.12.34 to ≤ 6.12.*unaffected
  • 6.15.3 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References