---
id: CVE-2025-37888
title: 'net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()

  Add NULL check for mlx5_get_flow_namespace() returns in
  mlx5_create_inner_ttc_table() and mlx5_create_…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 137f3d50ad2a0f2e1ebe5181d6b32a5541786b99 <
    0b682680b12b08cd62b113ea92b2938195de1dfe
  - >-
    Linux >= 137f3d50ad2a0f2e1ebe5181d6b32a5541786b99 <
    ecd9d2647ddb4f42a121de648e48659ae1856c39
  - >-
    Linux >= 137f3d50ad2a0f2e1ebe5181d6b32a5541786b99 <
    91037037ee3d611ce17f39d75f79c7de394b122a
  - Linux 6.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:44:36.806488Z'
published: '2025-05-09'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:52:07.038Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-37888'
references:
  - url: 'https://git.kernel.org/stable/c/0b682680b12b08cd62b113ea92b2938195de1dfe'
  - url: 'https://git.kernel.org/stable/c/ecd9d2647ddb4f42a121de648e48659ae1856c39'
  - url: 'https://git.kernel.org/stable/c/91037037ee3d611ce17f39d75f79c7de394b122a'
tags:
  - cve.org
epss: 0.00278
epssPercentile: 0.2036
ingestedAt: '2026-11-05T22:38:31.890Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table()

Add NULL check for mlx5_get_flow_namespace() returns in
mlx5_create_inner_ttc_table() and mlx5_create_ttc_table() to prevent
NULL pointer dereference.

## Affected

- `Linux >= 137f3d50ad2a0f2e1ebe5181d6b32a5541786b99 < 0b682680b12b08cd62b113ea92b2938195de1dfe`
- `Linux >= 137f3d50ad2a0f2e1ebe5181d6b32a5541786b99 < ecd9d2647ddb4f42a121de648e48659ae1856c39`
- `Linux >= 137f3d50ad2a0f2e1ebe5181d6b32a5541786b99 < 91037037ee3d611ce17f39d75f79c7de394b122a`
- `Linux 6.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.