Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-38526

ice: add NULL check in eswitch lag check

Description

In the Linux kernel, the following vulnerability has been resolved: ice: add NULL check in eswitch lag check The function ice_lag_is_switchdev_running() is being called from outside of the LAG event handler code. This results in the lag->upper_netdev being NULL sometimes. To avoid a NULL-pointer dereference, there needs to be a check before it is dereferenced.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 776fe19953b0e0af00399e50fb3b205101d4b3c1 to < 27591d926191e42b2332e4bad3bcd3a49def393baffected
  • 776fe19953b0e0af00399e50fb3b205101d4b3c1 to < 5a5d64f0eec82076b2c09fee2195d640cfbe3379affected
  • 776fe19953b0e0af00399e50fb3b205101d4b3c1 to < 245917d3c5ed7c6ae720302b64eac5c6f0c85177affected
  • 776fe19953b0e0af00399e50fb3b205101d4b3c1 to < 3ce58b01ada408b372f15b7c992ed0519840e3cfaffected

Linux Linux

Default version status: affected

  • 6.6affected
  • 0 to < 6.6unaffected
  • 6.6.100 to ≤ 6.6.*unaffected
  • 6.12.40 to ≤ 6.12.*unaffected
  • 6.15.8 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References