PT-2025-38563 · Linux+2 · Linux Kernel+2
CVE-2025-39856
·
Published
2025-04-16
·
Updated
2025-12-11
CVSS v4.0
5.7
Medium
| Vector | AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A null pointer dereference issue exists in the TX completion packet stage of TI SoCs with CPSW2G instances, which have a single external ethernet port. Accessing
ndev without initialization, if no TX packets have been processed, results in a null pointer dereference, causing the kernel to crash. The issue is fixed by adding a check on the number of TX packets processed.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Ti Socs