CVE-2025-38122

gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO

published July 3, 2025

CVSS
—
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO

gve_alloc_pending_packet() can return NULL, but gve_tx_add_skb_dqo()

did not check for this case before dereferencing the returned pointer.

Add a missing NULL check to prevent a potential NULL pointer

dereference when allocation fails.

This improves robustness in low-memory scenarios.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00192 · 8.4th percentile
Published
2025-07-03T08:35Z
EPSS history
Timeline
  • 03 JUL 08:35Z
    gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
    cvelistv5