CVE-2025-38664
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
Description
In the Linux kernel, the following vulnerability has been resolved: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() Add check for the return value of devm_kmemdup() to prevent potential null pointer dereference.
INFO
Published Date :
Aug. 22, 2025, 4:15 p.m.
Last Modified :
Jan. 7, 2026, 5:32 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Update the Linux kernel.
- Apply the provided patch.
- Verify the null pointer dereference fix.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2025-38664.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2025-38664 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2025-38664
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-38664 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-38664 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jan. 07, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-476 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.148 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.101 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.41 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.190 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.241 *cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.16:rc6:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.16:rc7:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.15.9 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.4 up to (excluding) 5.4.297 Added CPE Configuration OR *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Added Reference Type kernel.org: https://git.kernel.org/stable/c/0fde7dccbf4c8a6d7940ecaf4c3d80a12f405dd7 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/1c30093d58cd3d02d8358e2b1f4a06a0aae0bf5b Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/3028f2a4e746b499043bbb8ab816f975473a0535 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/35370d3b44efe194fd5ad55bac987e629597d782 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/435462f8ab2b9c5340a5414ce02f70117d0cfede Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/4ff12d82dac119b4b99b5a78b5af3bf2474c0a36 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/6d640a8ea62435a7f6f89869bee4fa99423d07ca Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/7c5a13c76dd37e9e4f8d48b87376a54f4399ce15 Types: Patch Added Reference Type CVE: https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Types: Third Party Advisory Added Reference Type CVE: https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Types: Third Party Advisory -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 03, 2025
Action Type Old Value New Value Added Reference https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Added Reference https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 28, 2025
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/35370d3b44efe194fd5ad55bac987e629597d782 Added Reference https://git.kernel.org/stable/c/435462f8ab2b9c5340a5414ce02f70117d0cfede Added Reference https://git.kernel.org/stable/c/7c5a13c76dd37e9e4f8d48b87376a54f4399ce15 -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 22, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() Add check for the return value of devm_kmemdup() to prevent potential null pointer dereference. Added Reference https://git.kernel.org/stable/c/0fde7dccbf4c8a6d7940ecaf4c3d80a12f405dd7 Added Reference https://git.kernel.org/stable/c/1c30093d58cd3d02d8358e2b1f4a06a0aae0bf5b Added Reference https://git.kernel.org/stable/c/3028f2a4e746b499043bbb8ab816f975473a0535 Added Reference https://git.kernel.org/stable/c/4ff12d82dac119b4b99b5a78b5af3bf2474c0a36 Added Reference https://git.kernel.org/stable/c/6d640a8ea62435a7f6f89869bee4fa99423d07ca