SB2025121687 - NULL pointer dereference in Linux kernel samsung sxgbe driver
Published: December 16, 2025
Security Bulletin ID
SB2025121687
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2025-68302)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the sxgbe_rx() function in drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/18ef3ad1bb57dcf1a9ee61736039aedccf670b21
- https://git.kernel.org/stable/c/45b5b4ddb8d6bea5fc1625ff6f163bbb125d49cc
- https://git.kernel.org/stable/c/46e5332126596a2ca791140feab18ce1fc1a3c86
- https://git.kernel.org/stable/c/7fd789d6ea4915034eb6bcb72f6883c8151083e5
- https://git.kernel.org/stable/c/88f46c0be77bfe45830ac33102c75be7c34ac3f3
- https://git.kernel.org/stable/c/ac171c3c755499c9f87fe30b920602255f8b5648
- https://git.kernel.org/stable/c/f5bce28f6b9125502abec4a67d68eabcd24b3b17