01 Record

CVE-2025-38184

tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 7.5% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-07-04 13:37Z1 YR AGO

Last updated

2026-08-05 12:00Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

0cbd31245ba03d1c87430cef5f57bd4d43d5b87a1c796d6e7a68da70f9f8c431

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux832629ca5c313e122b22b8e73a6d80f111b1a1ae to < 3998283e4c32c0fe69edd59b0876c193f50abce6, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to < c2e17984752b9131061d1a2ca1199da2706337fd, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to < 8595350615f952fcf8bc861464a6bf6b1129af50, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to < 05d332ba075753d569d66333d62d60fff5f57ad8, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to < d3dfe821dfe091c0045044343c8d86596d66e2cf, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to < 0d3d91c3500f0c480e016faa4e2259c588616e59, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to < 0f4a72fb266e48dbe928e1d936eab149e4ac3e1b, 832629ca5c313e122b22b8e73a6d80f111b1a1ae to < f82727adcf2992822e12198792af450a76ebd5ef, 4.9—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/3998283e4c32c0fe69edd59b0876c193f50abce6
git.kernel.orghttps://git.kernel.org/stable/c/c2e17984752b9131061d1a2ca1199da2706337fd
git.kernel.orghttps://git.kernel.org/stable/c/8595350615f952fcf8bc861464a6bf6b1129af50
git.kernel.orghttps://git.kernel.org/stable/c/05d332ba075753d569d66333d62d60fff5f57ad8
git.kernel.orghttps://git.kernel.org/stable/c/d3dfe821dfe091c0045044343c8d86596d66e2cf
git.kernel.orghttps://git.kernel.org/stable/c/0d3d91c3500f0c480e016faa4e2259c588616e59
git.kernel.orghttps://git.kernel.org/stable/c/0f4a72fb266e48dbe928e1d936eab149e4ac3e1b
git.kernel.orghttps://git.kernel.org/stable/c/f82727adcf2992822e12198792af450a76ebd5ef
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38184

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38184

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References