CVE-2025-21848

Description

In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value of nfp_app_ctrl_msg_alloc() in nfp_bpf_cmsg_alloc() to prevent null pointer dereference.

Reserved 2024-12-29 | Published 2025-03-12 | Updated 2025-03-13 | Assigner Linux

Product status

Default status
unaffected

ff3d43f7568c82b335d7df2d40a31447c3fce10c before d64c6ca420019712e194fe095b55f87363e22a9a
affected

ff3d43f7568c82b335d7df2d40a31447c3fce10c before e976ea6c5e1b005c64467cbf94a8577aae9c7d81
affected

ff3d43f7568c82b335d7df2d40a31447c3fce10c before 924b239f9704566e0d86abd894d2d64bd73c11eb
affected

ff3d43f7568c82b335d7df2d40a31447c3fce10c before 1358d8e07afdf21d49ca6f00c56048442977e00a
affected

ff3d43f7568c82b335d7df2d40a31447c3fce10c before 29ccb1e4040da6ff02b7e64efaa2f8e6bf06020d
affected

ff3d43f7568c82b335d7df2d40a31447c3fce10c before 897c32cd763fd11d0b6ed024c52f44d2475bb820
affected

ff3d43f7568c82b335d7df2d40a31447c3fce10c before bd97f60750bb581f07051f98e31dfda59d3a783b
affected

ff3d43f7568c82b335d7df2d40a31447c3fce10c before 878e7b11736e062514e58f3b445ff343e6705537
affected

Default status
affected

4.16
affected

Any version before 4.16
unaffected

5.4.291
unaffected

5.10.235
unaffected

5.15.179
unaffected

6.1.130
unaffected

6.6.80
unaffected

6.12.17
unaffected

6.13.5
unaffected

6.14-rc4
unaffected

References

git.kernel.org/...c/d64c6ca420019712e194fe095b55f87363e22a9a

git.kernel.org/...c/e976ea6c5e1b005c64467cbf94a8577aae9c7d81

git.kernel.org/...c/924b239f9704566e0d86abd894d2d64bd73c11eb

git.kernel.org/...c/1358d8e07afdf21d49ca6f00c56048442977e00a

git.kernel.org/...c/29ccb1e4040da6ff02b7e64efaa2f8e6bf06020d

git.kernel.org/...c/897c32cd763fd11d0b6ed024c52f44d2475bb820

git.kernel.org/...c/bd97f60750bb581f07051f98e31dfda59d3a783b

git.kernel.org/...c/878e7b11736e062514e58f3b445ff343e6705537

cve.org (CVE-2025-21848)

nvd.nist.gov (CVE-2025-21848)

Download JSON