CVE-2025-38123: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-38123 is a vulnerability discovered in the Linux kernel's WWAN T7XX driver component, specifically affecting the NAPI RX polling mechanism. The vulnerability was disclosed on July 3, 2025, and involves an issue where the network device might be released during NAPI RX polling requests, leading to potential system instability (NVD).

The vulnerability occurs in the net/wwan/t7xx subsystem of the Linux kernel. When the driver handles NAPI RX polling requests, the netdev might be released by the dellink logic triggered by the disconnect operation on the user plane. However, the logic continues to process SKB in polling using an invalid netdev reference, resulting in a NULL pointer dereference at address 0x000000000000f1, causing a kernel panic (NVD).

The vulnerability can cause a kernel panic when exploited, leading to system crashes and potential denial of service conditions. This affects the stability and availability of systems using the affected Linux kernel versions (NVD).

The vulnerability has been resolved in the Linux kernel through patches that fix the NAPI RX poll issue in the T7XX driver. Multiple commits have been made to address this vulnerability (NVD).