CVE-2025-37860

sfc: fix NULL dereferences in ef100_process_design_param()

Published Apr 18, 2025 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Description

In the Linux kernel, the following vulnerability has been resolved:

sfc: fix NULL dereferences in ef100_process_design_param()

Since cited commit, ef100_probe_main() and hence also
ef100_check_design_params() run before efx->net_dev is created;
consequently, we cannot netif_set_tso_max_size() or _segs() at this
point.
Move those netif calls to ef100_probe_netdev(), and also replace
netif_err within the design params code with pci_err.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`98ff4c7c8ac7f5339aac6114105395fea19f992e`	affected	< 68ce59a1fdec97d94384499d3b5bc097fca0dd5d
`98ff4c7c8ac7f5339aac6114105395fea19f992e`	affected	< a9703b006a475f474a571801ad3dd9b1bda35273
`98ff4c7c8ac7f5339aac6114105395fea19f992e`	affected	< f21623b8446735b5e2ac5f8ee69b8743177d7b19
`98ff4c7c8ac7f5339aac6114105395fea19f992e`	affected	< e56391011381d6d029da377a65ac314cb3d5def2
`98ff4c7c8ac7f5339aac6114105395fea19f992e`	affected	< 8241ecec1cdc6699ae197d52d58e76bddd995fa5

Linux

affected

Version	Status	Constraints
`6.0`	affected	—
`0`	unaffected	< 6.0
`6.1.191`	unaffected	≤ 6.1.*
`6.6.160`	unaffected	≤ 6.6.*
`6.12.57`	unaffected	≤ 6.12.*
`6.14.2`	unaffected	≤ 6.14.*
`6.15`	unaffected	≤ *

Configuration 1 [-]

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-11830	In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100_process_design_param() Since cited commit, ef100_probe_main() and hence also ef100_check_design_params() run before efx->net_dev is created; consequently, we cannot netif_set_tso_max_size() or _segs() at this point. Move those netif calls to ef100_probe_netdev(), and also replace netif_err within the design params code with pci_err.
Ubuntu USN	USN-7594-1	Linux kernel vulnerabilities
Ubuntu USN	USN-7594-2	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-7594-3	Linux kernel vulnerabilities
Ubuntu USN	USN-8095-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8095-2	Linux kernel (FIPS) vulnerabilities
Ubuntu USN	USN-8100-1	Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN	USN-8095-3	Linux kernel (Real-time) vulnerabilities
Ubuntu USN	USN-8095-4	Linux kernel (AWS) vulnerabilities
Ubuntu USN	USN-8125-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-8126-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-8095-5	Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN	USN-8165-1	Linux kernel (Azure FIPS) vulnerabilities
Ubuntu USN	USN-8261-1	Linux kernel (Xilinx) vulnerabilities

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.325% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://git.kernel.org/stable/c/68ce59a1fdec97d94384499d3b5bc097fca0dd5d
https://git.kernel.org/stable/c/8241ecec1cdc6699ae197d52d58e76bddd995fa5
https://git.kernel.org/stable/c/a9703b006a475f474a571801ad3dd9b1bda35273
https://git.kernel.org/stable/c/e56391011381d6d029da377a65ac314cb3d5def2
https://git.kernel.org/stable/c/f21623b8446735b5e2ac5f8ee69b8743177d7b19
https://lore.kernel.org/linux-cve-announce/2025041816-CVE-2025-37860-9af2@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-37860
https://www.cve.org/CVERecord?id=CVE-2025-37860

History

Oct 30, 2026 12:30 PM Added references View changes

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/68ce59a1fdec97d94384499d3b5bc097fca0dd5d

Oct 21, 2026 12:30 PM Added references View changes

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/a9703b006a475f474a571801ad3dd9b1bda35273

Nov 2, 2025 1:45 PM Added references View changes

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/f21623b8446735b5e2ac5f8ee69b8743177d7b19

Oct 1, 2025 5:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Apr 29, 2025 5:15 PM First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Linux Linux linux Kernel
Weaknesses		CWE-476
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel

Apr 19, 2025 2:00 AM Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025041816-CVE-2025-37860-9af2@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2025-37860 https://www.cve.org/CVERecord?id=CVE-2025-37860
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Apr 18, 2025 7:15 AM Description updated. Title updated. Added references View changes

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100_process_design_param() Since cited commit, ef100_probe_main() and hence also ef100_check_design_params() run before efx->net_dev is created; consequently, we cannot netif_set_tso_max_size() or _segs() at this point. Move those netif calls to ef100_probe_netdev(), and also replace netif_err within the design params code with pci_err.
Title		sfc: fix NULL dereferences in ef100_process_design_param()
References		https://git.kernel.org/stable/c/8241ecec1cdc6699ae197d52d58e76bddd995fa5 https://git.kernel.org/stable/c/e56391011381d6d029da377a65ac314cb3d5def2