CVE-2025-38664 json
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
published 2025-08-22 14 mo ago modified 2026-11-05 3 d ago also EUVD-2025-25537
- cvss
- 5.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 7%
- public exploits
- 0
- none known
Summary
In the Linux kernel, the following vulnerability has been resolved:
ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
Add check for the return value of devm_kmemdup() to prevent potential null pointer dereference.
Patch / fix
- Linux Linux 5.4.297, 5.10.241, 5.15.190, 6.1.148, 6.6.101, 6.12.41, 6.15.9, 6.16
- linux Debian 12 6.1.148-1
- linux Debian 13 6.12.41-1
- linux Debian 14 6.16.3-1
debian advisories DEBIAN-CVE-2025-38664
- linux Ubuntu 22.04 LTS 5.15.0-163.173
- linux Ubuntu 24.04 LTS 6.8.0-100.100
- linux-aws Ubuntu 22.04 LTS 5.15.0-1097.104
- linux-aws Ubuntu 24.04 LTS 6.8.0-1046.49
- linux-gcp Ubuntu 22.04 LTS 5.15.0-1097.106
- linux-gcp Ubuntu 24.04 LTS 6.8.0-1047.50
- linux-gke Ubuntu 22.04 LTS 5.15.0-1093.99
- linux-gke Ubuntu 24.04 LTS 6.8.0-1043.48
ubuntu advisories UBUNTU-CVE-2025-38664
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- kernel-livepatch-SLE16_Update_0 SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 5-160000.4.3
- kernel-livepatch-SLE16-RT_Update_0 Linux Micro 6.2 4-160000.3.4
- kernel-rt Linux Micro 6.2 6.12.0-160000.6.1
- kernel-64kb SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1
- kernel-source SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1
- kernel-default SLES 16.0, SLE High Availability Extension 16.0, Linux Micro 6.2 +1 more 6.12.0-160000.6.1
- kernel-default-base SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1.160000.2.4
- kernel-syms SLES 16.0, Linux Micro Extras 6.2, SLES for SAP applications 16.0 6.12.0-160000.6.1
suse advisories SUSE-SU-2026:20149-1SUSE-SU-2026:20169-1SUSE-SU-2026:20164-1SUSE-SU-2025:21074-1SUSE-SU-2025:21139-1SUSE-SU-2026:20560-1
- kernel-rt openSUSE Leap 16.0 6.12.0-160000.6.1
- dtb-aarch64 openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-64kb openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-syms openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-obs-qa openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-source openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-default openSUSE Leap 16.0 6.12.0-160000.6.1
- kernel-kvmsmall openSUSE Leap 16.0 6.12.0-160000.6.1
opensuse advisories openSUSE-SU-2025:20081-1
- kernel Azure Linux 3.0 6.6.104.2-1
- kernel CBL-Mariner 2.0 5.15.200.1-1
azure linux advisories AZL-66635AZL-73635
Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT
- git.kernel.org/stable/c/35370d3b44efe194fd5ad55bac987e629597d782 commit
- git.kernel.org/stable/c/435462f8ab2b9c5340a5414ce02f70117d0cfede commit
- git.kernel.org/stable/c/7c5a13c76dd37e9e4f8d48b87376a54f4399ce15 commit
- git.kernel.org/stable/c/1c30093d58cd3d02d8358e2b1f4a06a0aae0bf5b commit
- git.kernel.org/stable/c/3028f2a4e746b499043bbb8ab816f975473a0535 commit
- git.kernel.org/stable/c/0fde7dccbf4c8a6d7940ecaf4c3d80a12f405dd7 commit
- git.kernel.org/stable/c/6d640a8ea62435a7f6f89869bee4fa99423d07ca commit
- git.kernel.org/stable/c/4ff12d82dac119b4b99b5a78b5af3bf2474c0a36 commit
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2025-38664 updated cvss 4.1
kernel: ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
-
Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +83 more Red Hat Enterprise Linux 10 kernelaffected: workaround, no fix available “Fix deferred”
-
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 morenot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 3 d ago
Exploit prediction
0.18% chance of exploitation in the next 30 days, higher than 7% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Affected products
- Linux Linux
Classification
- Weakness
-
- CWE-476 NULL Pointer Dereference
- Technology feeds
References
-
git.kernel.org
/stable/c/35370d3b44efe194fd5ad55bac987e629597d782
patch
-
git.kernel.org
/stable/c/435462f8ab2b9c5340a5414ce02f70117d0cfede
patch
-
git.kernel.org
/stable/c/7c5a13c76dd37e9e4f8d48b87376a54f4399ce15
patch
-
git.kernel.org
/stable/c/1c30093d58cd3d02d8358e2b1f4a06a0aae0bf5b
patch
-
git.kernel.org
/stable/c/3028f2a4e746b499043bbb8ab816f975473a0535
patch
-
git.kernel.org
/stable/c/0fde7dccbf4c8a6d7940ecaf4c3d80a12f405dd7
patch
-
git.kernel.org
/stable/c/6d640a8ea62435a7f6f89869bee4fa99423d07ca
patch
-
git.kernel.org
/stable/c/4ff12d82dac119b4b99b5a78b5af3bf2474c0a36
patch
-
lists.debian.org
/debian-lts-announce/2025/10/msg00008.html
third-party-advisory
-
lists.debian.org
/debian-lts-announce/2025/10/msg00007.html
third-party-advisory
Sources
- CVE List CVE-2025-38664
- NVD CVE-2025-38664
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.