Critical NULL Pointer Dereference Vulnerability in Linux Kernel Package
Summary
DEBIAN-CVE-2025-38526: In the Linux kernel, the following vulnerability has been resolved: ice: add NULL check in eswitch lag check The function ice_lag_is_switchdev_running() is being called from outside of the LAG event handler code. Affects linux versions < 6.12.41-1. Fixed in 6.12.41-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, including Debian. It manages hardware resources and provides essential services for software applications. The kernel is known for its stability and performance, but vulnerabilities can arise due to complex interactions within its code. This specific vulnerability affects the Linux kernel versions in Debian 13 and 14, potentially leading to system crashes or unexpected behavior.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ice driver related to the handling of Link Aggregation Groups (LAG). The function ice_lag_is_switchdev_running() can be invoked outside of the LAG event handler, leading to a scenario where lag->upper_netdev may be NULL. This can result in a NULL-pointer dereference, causing the system to crash or behave unpredictably. The vulnerability is critical as it can be exploited in environments relying on LAG for network redundancy and performance.
How To Fix
Minimum fixed version
6.12.41-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk due to potential NULL-pointer dereferences. Users of Debian 13 and 14 should prioritize updating their systems to the patched versions to ensure stability and security. Regular monitoring and prompt updates are essential for maintaining a secure environment.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to a NULL-pointer dereference, which may cause system crashes or unexpected behavior in network operations.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability affects Linux kernel versions prior to 6.12.41-1 for Debian 13 and prior to 6.16.3-1 for Debian 14.
Yes, patches are available in the updated versions of the Linux kernel for both Debian 13 and 14.
While there are no specific workarounds, it is advisable to monitor your system closely and apply the patch as soon as possible to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
