CVE-2025-38053

In the Linux kernel, the following vulnerability has been resolved: idpf: fix null-ptr-deref in idpf_features_check idpf_features_check is used to validate the TX packet. skb header length is compared with the hardware supported value received from the device control plane. The value is stored in the adapter structure and to access it, vport pointer is used. During reset all the vports are released and the vport pointer that the netdev private structure points to is NULL. To avoid null-ptr-deref, store the max header length value in netdev private structure. This also helps to cache the value and avoid accessing adapter pointer in hot path. BUG: kernel NULL pointer dereference, address: 0000000000000068 ... RIP: 0010:idpf_features_check+0x6d/0xe0 [idpf] Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x154/0x520 ? exc_page_fault+0x76/0x190 ? asm_exc_page_fault+0x26/0x30 ? idpf_features_check+0x6d/0xe0 [idpf] netif_skb_features+0x88/0x310 validate_xmit_skb+0x2a/0x2b0 validate_xmit_skb_list+0x4c/0x70 sch_direct_xmit+0x19d/0x3a0 __dev_queue_xmit+0xb74/0xe70 ...

• CWE-476

• https://git.kernel.org/stable/c/2dabe349f7882ff1407a784d54d8541909329088Patch
• https://git.kernel.org/stable/c/bf1e751c5a5611aa037ab44cca955c141eb68dccPatch
• https://git.kernel.org/stable/c/f6f5e9c8cb680c3cb9771fd9fa114319cbc4f514Patch

Published

Jun 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38048In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2025-38049In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-3805A vulnerability classified as critical was found in sarriona…5.3
• CVE-2025-38050In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38051In the Linux kernel, the following vulnerability has been re…7
• CVE-2025-38052In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38054In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38055In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38056In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-38057In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38058In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38059In the Linux kernel, the following vulnerability has been re…5.5