CVE-2025-21980

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21980
In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. This, in turn, calls gred_offload, where memset could receive a NULL pointer as input, potentially leading to a kernel crash. When table->opt is NULL in gred_init(), gred_change_table_def() is not called yet, so it is not necessary to call ->ndo_setup_tc() in gred_offload().

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0f0a152957d64ce45b4c27c687e7d087e8f45079 Patch
https://git.kernel.org/stable/c/115ef44a98220fddfab37a39a19370497cd718b9 Patch
https://git.kernel.org/stable/c/5f996b4f80c2cef1f9c77275055e7fcba44c9199 Patch
https://git.kernel.org/stable/c/68896dd50180b38ea552e49a6a00b685321e5769 Patch
https://git.kernel.org/stable/c/d02c9acd68950a444acda18d514e2b41f846cb7f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*
History

10 Apr 2025, 13:25

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sched: soluciona una posible desreferencia de puntero nulo en el programador GRED. Si kzalloc en gred_init devuelve un puntero nulo, el código sigue la ruta de gestión de errores, invocando gred_destroy. Esto, a su vez, llama a gred_offload, donde memset podría recibir un puntero nulo como entrada, lo que podría provocar un fallo del kernel. Cuando table->opt es nulo en gred_init(), gred_change_table_def() aún no se llama, por lo que no es necesario llamar a ->ndo_setup_tc() en gred_offload().
CPE cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/0f0a152957d64ce45b4c27c687e7d087e8f45079 - () https://git.kernel.org/stable/c/0f0a152957d64ce45b4c27c687e7d087e8f45079 - Patch
References () https://git.kernel.org/stable/c/115ef44a98220fddfab37a39a19370497cd718b9 - () https://git.kernel.org/stable/c/115ef44a98220fddfab37a39a19370497cd718b9 - Patch
References () https://git.kernel.org/stable/c/5f996b4f80c2cef1f9c77275055e7fcba44c9199 - () https://git.kernel.org/stable/c/5f996b4f80c2cef1f9c77275055e7fcba44c9199 - Patch
References () https://git.kernel.org/stable/c/68896dd50180b38ea552e49a6a00b685321e5769 - () https://git.kernel.org/stable/c/68896dd50180b38ea552e49a6a00b685321e5769 - Patch
References () https://git.kernel.org/stable/c/d02c9acd68950a444acda18d514e2b41f846cb7f - () https://git.kernel.org/stable/c/d02c9acd68950a444acda18d514e2b41f846cb7f - Patch
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

01 Apr 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-01 16:15

Updated : 2025-04-10 13:25

NVD link : CVE-2025-21980

Mitre link : CVE-2025-21980

CVE.ORG link : CVE-2025-21980

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference