In the Linux kernel, the following vulnerability has been resolved:
RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
If get_ep_from_tid() fails to lookup non-NULL value for ep, ep is dereferenced later regardless of whether it is empty. This patch adds a simple sanity check to fix the issue.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 19, 2025 | Sep 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 14, 2025 | Sep 17, 2025 |
| Ubuntu | — | Upgrade linux-nvidia-tegraUpgrade linux-azure-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-awsUpgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-gkeopUpgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-nvidia-tegra-5.15Upgrade linux-riscv-5.15Upgrade linux-oracleUpgrade linux-gcpUpgrade linux-raspiUpgrade linux-oracle-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-azure-fdeUpgrade linux-lowlatencyUpgrade linux-azureUpgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linuxUpgrade linux-hwe-5.15Upgrade linux-gkeUpgrade linux-aws-5.15 | Sep 26, 2025 | Sep 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub