CVE-2025-68302

Dec. 18, 2025, 3:08 p.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgbe_rx() Currently, when skb is null, the driver prints an error and then dereferences skb on the next line. To fix this, let's add a 'break' after the error message to switch to sxgbe_rx_refill(), which is similar to the approach taken by the other drivers in this particular case, e.g. calxeda with xgmac_rx(). Found during a code review.

Product(s) Impacted

Product Versions

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/18ef3ad1bb57dcf1a9ee61736039aedccf670b21
https://git.kernel.org/stable/c/45b5b4ddb8d6bea5fc1625ff6f163bbb125d49cc
https://git.kernel.org/stable/c/46e5332126596a2ca791140feab18ce1fc1a3c86
https://git.kernel.org/stable/c/7fd789d6ea4915034eb6bcb72f6883c8151083e5
https://git.kernel.org/stable/c/88f46c0be77bfe45830ac33102c75be7c34ac3f3
https://git.kernel.org/stable/c/ac171c3c755499c9f87fe30b920602255f8b5648
https://git.kernel.org/stable/c/f5bce28f6b9125502abec4a67d68eabcd24b3b17

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2025-12-16
CVE-2025-68302

Timeline

Published: Dec. 16, 2025, 4:16 p.m.
Last Modified: Dec. 18, 2025, 3:08 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.