CVE-2025-38683

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

hv_netvsc: Fix panic during namespace deletion with VF

The existing code move the VF NIC to new namespace when NETDEV_REGISTER is

received on netvsc NIC. During deletion of the namespace,

default_device_exit_batch() >> default_device_exit_net() is called. When

netvsc NIC is moved back and registered to the default namespace, it

automatically brings VF NIC back to the default namespace. This will cause

the default_device_exit_net() >> for_each_netdev_safe loop unable to detect

the list end, and hit NULL ptr:

[ 231.449420] mana 7870:00:00.0 enP30832s1: Moved VF to namespace with: eth0

[ 231.449656] BUG: kernel NULL pointer dereference, address: 0000000000000010

[ 231.450246] #PF: supervisor read access in kernel mode

[ 231.450579] #PF: error_code(0x0000) - not-present page

[ 231.450916] PGD 17b8a8067 P4D 0

[ 231.451163] Oops: Oops: 0000 [#1] SMP NOPTI

[ 231.451450] CPU: 82 UID: 0 PID: 1394 Comm: kworker/u768:1

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References