CVE-2025-38645

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Check device memory pointer before usage

Add a NULL check before accessing device memory to prevent a crash if dev->dm allocation in mlx5_init_once() fails.

A flaw in the Mellanox mlx5 device memory handling could cause a NULL pointer dereference when the driver attempts to access uninitialized device memory. If mlx5_dm_create() fails and returns NULL, later code may still try to use the pointer, resulting in a kernel crash. This makes it possible for a local user interacting with the hardware to trigger a denial of service, though it does not expose data or allow privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.