Description

In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100_process_design_param() Since cited commit, ef100_probe_main() and hence also ef100_check_design_params() run before efx->net_dev is created; consequently, we cannot netif_set_tso_max_size() or _segs() at this point. Move those netif calls to ef100_probe_netdev(), and also replace netif_err within the design params code with pci_err.

INFO

Published Date :

2025-04-18T07:01:28.132Z

Last Modified :

2025-11-02T13:30:36.755Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-37860 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-37860.

URL Resource
https://git.kernel.org/stable/c/8241ecec1cdc6699ae197d52d58e76bddd995fa5 cve-icon cve-icon
https://git.kernel.org/stable/c/e56391011381d6d029da377a65ac314cb3d5def2 cve-icon cve-icon
https://git.kernel.org/stable/c/f21623b8446735b5e2ac5f8ee69b8743177d7b19 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025041816-CVE-2025-37860-9af2@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-37860 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-37860 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact