A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.14.8. Affected is the function
nvmet_tcp_set_queue_sock of the component TCP Connection Handler. The manipulation leads to null pointer dereference.
This vulnerability is traded as CVE-2025-38035. Access to the local network is required for this attack to succeed. There is no exploit available.
It is recommended to upgrade the affected component.
