CVE-2025-21773

MEDIUM EPSS 10.1%
Published Feb 27, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 27, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: fix potential NULL pointer dereference on udev->serial The driver assumed that es58x_dev->udev->serial could never be NULL. While this is true on commercially available devices, an attacker could spoof the device identity providing a NULL USB serial number. That would trigger a NULL pointer dereference. Add a check on es58x_dev->udev->serial before accessing it.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
10.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥6.2  –  <6.6.79
linuxlinux_kernel*≥6.7  –  <6.12.16
linuxlinux_kernel*≥6.13  –  <6.13.4
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/1590667a60753ee5a54871f2840ceefd4a7831fa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5059ea98d7bc133903d3e47ab36df6ed11d0c95f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/722e8e1219c8b6ac2865011fe339315d6a8d0721
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a1ad2109ce41c9e3912dadd07ad8a9c640064ffb
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/1590667a60753ee5a54871f2840ceefd4a7831fa
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5059ea98d7bc133903d3e47ab36df6ed11d0c95f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/722e8e1219c8b6ac2865011fe339315d6a8d0721
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a1ad2109ce41c9e3912dadd07ad8a9c640064ffb
    Patch