CVE-2025-38053 is a medium severity vulnerability in the Linux kernel's idpf driver that causes a NULL pointer dereference in the idpf_features_check function. This occurs because the vport pointer used to access hardware-supported TX packet header length can be NULL during device reset. The issue has been fixed by caching the max header length value in the netdev private structure to avoid dereferencing a NULL pointer.