CVE-2025-68302

CVE-2025-68302

High · published December 16, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: sxgbe: fix potential NULL dereference in sxgbe_rx()

Currently, when skb is null, the driver prints an error and then

dereferences skb on the next line.

To fix this, let's add a 'break' after the error message to switch

to sxgbe_rx_refill(), which is similar to the approach taken by the

other drivers in this particular case, e.g. calxeda with xgmac_rx().

Found during a code review.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00455 · 38.5th percentile
Published
2025-12-16T21:16Z
References (7)
EPSS history
Timeline
  • 16 DEC 15:06Z
    net: sxgbe: fix potential NULL dereference in sxgbe_rx()
    cvelistv5