CVE-2025-38263

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

bcache: fix NULL pointer in cache_set_flush()

1. LINE#1794 - LINE#1887 is some codes about function of

bch_cache_set_alloc().

2. LINE#2078 - LINE#2142 is some codes about function of

register_cache_set().

3. register_cache_set() will call bch_cache_set_alloc() in LINE#2098.

1794 struct cache_set *bch_cache_set_alloc(struct cache_sb *sb)

1795 {

...

1860 if (!(c->devices = kcalloc(c->nr_uuids, sizeof(void *), GFP_KERNEL)) ||

1861 mempool_init_slab_pool(&c->search, 32, bch_search_cache) ||

1862 mempool_init_kmalloc_pool(&c->bio_meta, 2,

1863 sizeof(struct bbio) + sizeof(struct bio_vec) *

1864 bucket_pages(c)) ||

1865 mempool_init_kmalloc_pool(&c->fill_iter, 1, iter_size) ||

1866 bioset_init(&c->bio_split, 4, offsetof(struct bbio, bio),

1867 BIOSET_NEED_BVECS|BI

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References