CVE-2025-37860

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-37860
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37860.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-37860
Downstream
Related
Published
2025-04-18T07:01:28Z
Modified
2025-10-18T00:32:40.398346Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
sfc: fix NULL dereferences in ef100_process_design_param()
Details

In the Linux kernel, the following vulnerability has been resolved:

sfc: fix NULL dereferences in ef100processdesign_param()

Since cited commit, ef100probemain() and hence also ef100checkdesignparams() run before efx->netdev is created; consequently, we cannot netifsettsomaxsize() or segs() at this point. Move those netif calls to ef100probenetdev(), and also replace netiferr within the design params code with pci_err.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
98ff4c7c8ac7f5339aac6114105395fea19f992e
Fixed
e56391011381d6d029da377a65ac314cb3d5def2
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
98ff4c7c8ac7f5339aac6114105395fea19f992e
Fixed
8241ecec1cdc6699ae197d52d58e76bddd995fa5

Affected versions

v5.*

v5.19
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.14.1
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "id": "CVE-2025-37860-00d85cfa",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "325212329375068165359138377696184199336",
            "length": 2352.0
        },
        "target": {
            "file": "drivers/net/ethernet/sfc/ef100_netdev.c",
            "function": "ef100_probe_netdev"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e56391011381d6d029da377a65ac314cb3d5def2"
    },
    {
        "id": "CVE-2025-37860-0a5fed44",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "165123172086716659001367039998615178789",
                "231952057959357258956960951238969891956",
                "312865144774979775507061388904888683264",
                "239802181419298430074851558784772416805",
                "105744674165135432556263896108757267964",
                "9170063137318386622978809125829499888",
                "104577191385763961515756864402786504286",
                "45962161011717370924952150503052420725",
                "57780575301187554147088178226916833506",
                "288722343908428419036899401378163090118",
                "21155878034584035897028954356382872180",
                "237894470234277541476591697605687854133",
                "272977470380034126123281967145614344614",
                "279310875517203549913129079003917080737",
                "34862910585428618759594538020084191340",
                "54256126134164770011093886243050244216",
                "120061024211858154600374166160788590361",
                "234837956749682453172626274616514300099",
                "304026133959785991761947849193497744725",
                "183411005796456697881612861817856324673",
                "307158702682888250952534809773133678392",
                "235741310760491971947350069958185762295",
                "69573615198647602551307256787804555288",
                "213175289339906100795454246984261704020",
                "306446552757327942047557041956478999585",
                "8422150247402981684529576476074818612",
                "35306418849461442835659882488481075962",
                "195512203016610737080119224200018194318",
                "200701404827314793740417689974127496862",
                "89975474813366391553465743818049841868",
                "293440389058650001327233245571784328802",
                "56521302390444212209103608439553589539",
                "266632349481277451884322082216606668251",
                "237894470234277541476591697605687854133",
                "72760886296575773765520929993144449821",
                "51727867443735244606003161772903766715",
                "296100234263009180397356043057338669782",
                "305292425799933291305937115042211062784",
                "147939376685103034543091279050162231821",
                "107713324167845869894038422072232151244",
                "6540093087986525330975720506148937300",
                "80696020363896666398149285807021173067",
                "210976319217148801539306954375189124670",
                "277441025694216691420406552700151918466",
                "107468324406846236257205040897975900354",
                "186519775769056088202050434835938307217",
                "320616440768854751150653523834464902830",
                "39994363238908173776476249269306241768",
                "57549960885793994997042118401310919679",
                "50422402948514322674685760580581667613",
                "143393163092177714374614163976276659679",
                "210975163224618298245936848208844630243",
                "29293295621300671140098567407989102083",
                "319601814433789379602031877943684153617",
                "218512509780758066270052363935934098718",
                "103660851788258932459838004246103776508",
                "2194069531726810090772861312940218012"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/net/ethernet/sfc/ef100_nic.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8241ecec1cdc6699ae197d52d58e76bddd995fa5"
    },
    {
        "id": "CVE-2025-37860-268ce6f6",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "114670004192460965865930926424373550054",
                "224634612620367260629160933139808785323",
                "299634164437233364768743534706434407159",
                "85359611222429692651526330513873290501",
                "296525861055663925256703731499386996332",
                "116100267719521831524829415572763484844",
                "35810848777167523794958050184405715177",
                "214454308161281215517732896067246391555",
                "90385878033717968592412074554271886186"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/net/ethernet/sfc/ef100_netdev.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e56391011381d6d029da377a65ac314cb3d5def2"
    },
    {
        "id": "CVE-2025-37860-407ad7af",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "67036161853694822476512983775285985848",
            "length": 994.0
        },
        "target": {
            "file": "drivers/net/ethernet/sfc/ef100_nic.c",
            "function": "ef100_check_design_params"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e56391011381d6d029da377a65ac314cb3d5def2"
    },
    {
        "id": "CVE-2025-37860-6454e0ac",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "114670004192460965865930926424373550054",
                "224634612620367260629160933139808785323",
                "299634164437233364768743534706434407159",
                "85359611222429692651526330513873290501",
                "296525861055663925256703731499386996332",
                "116100267719521831524829415572763484844",
                "35810848777167523794958050184405715177",
                "214454308161281215517732896067246391555",
                "90385878033717968592412074554271886186"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/net/ethernet/sfc/ef100_netdev.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8241ecec1cdc6699ae197d52d58e76bddd995fa5"
    },
    {
        "id": "CVE-2025-37860-68b0b076",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "232164362296057465159075248165959775166",
            "length": 2485.0
        },
        "target": {
            "file": "drivers/net/ethernet/sfc/ef100_nic.c",
            "function": "ef100_process_design_param"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e56391011381d6d029da377a65ac314cb3d5def2"
    },
    {
        "id": "CVE-2025-37860-8ec7e69c",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "325212329375068165359138377696184199336",
            "length": 2352.0
        },
        "target": {
            "file": "drivers/net/ethernet/sfc/ef100_netdev.c",
            "function": "ef100_probe_netdev"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8241ecec1cdc6699ae197d52d58e76bddd995fa5"
    },
    {
        "id": "CVE-2025-37860-9491868d",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "232164362296057465159075248165959775166",
            "length": 2485.0
        },
        "target": {
            "file": "drivers/net/ethernet/sfc/ef100_nic.c",
            "function": "ef100_process_design_param"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8241ecec1cdc6699ae197d52d58e76bddd995fa5"
    },
    {
        "id": "CVE-2025-37860-b407eb49",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Line",
        "digest": {
            "line_hashes": [
                "165123172086716659001367039998615178789",
                "231952057959357258956960951238969891956",
                "312865144774979775507061388904888683264",
                "239802181419298430074851558784772416805",
                "105744674165135432556263896108757267964",
                "9170063137318386622978809125829499888",
                "104577191385763961515756864402786504286",
                "45962161011717370924952150503052420725",
                "57780575301187554147088178226916833506",
                "288722343908428419036899401378163090118",
                "21155878034584035897028954356382872180",
                "237894470234277541476591697605687854133",
                "272977470380034126123281967145614344614",
                "279310875517203549913129079003917080737",
                "34862910585428618759594538020084191340",
                "54256126134164770011093886243050244216",
                "120061024211858154600374166160788590361",
                "234837956749682453172626274616514300099",
                "304026133959785991761947849193497744725",
                "183411005796456697881612861817856324673",
                "307158702682888250952534809773133678392",
                "235741310760491971947350069958185762295",
                "69573615198647602551307256787804555288",
                "213175289339906100795454246984261704020",
                "306446552757327942047557041956478999585",
                "8422150247402981684529576476074818612",
                "35306418849461442835659882488481075962",
                "195512203016610737080119224200018194318",
                "200701404827314793740417689974127496862",
                "89975474813366391553465743818049841868",
                "293440389058650001327233245571784328802",
                "56521302390444212209103608439553589539",
                "266632349481277451884322082216606668251",
                "237894470234277541476591697605687854133",
                "72760886296575773765520929993144449821",
                "51727867443735244606003161772903766715",
                "296100234263009180397356043057338669782",
                "305292425799933291305937115042211062784",
                "147939376685103034543091279050162231821",
                "107713324167845869894038422072232151244",
                "6540093087986525330975720506148937300",
                "80696020363896666398149285807021173067",
                "210976319217148801539306954375189124670",
                "277441025694216691420406552700151918466",
                "107468324406846236257205040897975900354",
                "186519775769056088202050434835938307217",
                "320616440768854751150653523834464902830",
                "39994363238908173776476249269306241768",
                "57549960885793994997042118401310919679",
                "50422402948514322674685760580581667613",
                "143393163092177714374614163976276659679",
                "210975163224618298245936848208844630243",
                "29293295621300671140098567407989102083",
                "319601814433789379602031877943684153617",
                "218512509780758066270052363935934098718",
                "103660851788258932459838004246103776508",
                "2194069531726810090772861312940218012"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/net/ethernet/sfc/ef100_nic.c"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e56391011381d6d029da377a65ac314cb3d5def2"
    },
    {
        "id": "CVE-2025-37860-d2033396",
        "deprecated": false,
        "signature_version": "v1",
        "signature_type": "Function",
        "digest": {
            "function_hash": "67036161853694822476512983775285985848",
            "length": 994.0
        },
        "target": {
            "file": "drivers/net/ethernet/sfc/ef100_nic.c",
            "function": "ef100_check_design_params"
        },
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8241ecec1cdc6699ae197d52d58e76bddd995fa5"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
6.14.2