In the Linux kernel, the following vulnerability has been resolved: ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() As mentioned in the commit baeb705fd6a7 ("ice: always check VF VSI pointer values"), we need to perform a null pointer check on the return value of ice_get_vf_vsi() before using it.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/0561f2e374c3732b90e50f0a244791a4308ec67e cve-icon cve-icon
https://git.kernel.org/stable/c/073791e9cfe6e4a11a6d85816ba87b1aa207493e cve-icon cve-icon
https://git.kernel.org/stable/c/425c5f266b2edeee0ce16fedd8466410cdcfcfe3 cve-icon cve-icon
https://git.kernel.org/stable/c/a32dcc3b8293600ddc4024731b4d027d4de061a4 cve-icon cve-icon
https://git.kernel.org/stable/c/eae60cfe25d022d7f0321dba4cc23ad8e87ade48 cve-icon cve-icon
https://git.kernel.org/stable/c/f68237982dc012230550f4ecf7ce286a9c37ddc9 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025052059-CVE-2025-37912-2b82@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-37912 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-37912 cve-icon
History

Mon, 03 Nov 2025 20:30:00 +0000

Type Values Removed Values Added
References

Mon, 14 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00061}

 epss

{'score': 0.00051}

Tue, 17 Jun 2025 06:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Thu, 22 May 2025 02:45:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Tue, 20 May 2025 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() As mentioned in the commit baeb705fd6a7 ("ice: always check VF VSI pointer values"), we need to perform a null pointer check on the return value of ice_get_vf_vsi() before using it.
Title ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-05-20T15:21:44.062Z

Updated: 2025-11-03T19:57:13.684Z

Reserved: 2025-04-16T04:51:23.967Z

Link: CVE-2025-37912

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-05-20T16:15:27.723

Modified: 2025-11-03T20:18:41.083

Link: CVE-2025-37912

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-05-20T00:00:00Z

Links: CVE-2025-37912 - Bugzilla