CVE-2025-39857

kernel: net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 19, 2025

Updated · October 14, 2026

Description

A flaw was found in the Linux kernel's Shared Memory Communications (SMC) subsystem. A local user can cause a denial of service (DoS) by triggering a kernel crash when using a software RoCE (RDMA over Converged Ethernet) device. This issue occurs because the kernel fails to validate a direct memory access device pointer before accessing it during buffer mapping, leading to a null pointer dereference.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference