CVE-2025-21775

MEDIUM EPSS 10.2%
Published Feb 27, 20251y ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Feb 27, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: can: ctucanfd: handle skb allocation failure If skb allocation fails, the pointer to struct can_frame is NULL. This is actually handled everywhere inside ctucan_err_interrupt() except for the only place. Add the missed NULL check. Found by Linux Verification Center (linuxtesting.org) with SVACE static analysis tool.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
10.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 6

VendorProductVersionRange
linuxlinux_kernel*≥5.19  –  <6.1.129
linuxlinux_kernel*≥6.2  –  <6.6.79
linuxlinux_kernel*≥6.7  –  <6.12.16
linuxlinux_kernel*≥6.13  –  <6.13.4
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any

References 6

  • git.kernel.org https://git.kernel.org/stable/c/84b9ac59978a6a4e0812d1c938fad97306272cef
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9bd24927e3eeb85642c7baa3b28be8bea6c2a078
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b0e592dd46a0a952b41c3bf6c963afdd6a42b526
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e505b83b9ee6aa0ae2f4395f573a66579ae403fb
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e7e2e2318b1f085044126ba553a4e619842fc36d
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/84b9ac59978a6a4e0812d1c938fad97306272cef
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9bd24927e3eeb85642c7baa3b28be8bea6c2a078
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b0e592dd46a0a952b41c3bf6c963afdd6a42b526
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e505b83b9ee6aa0ae2f4395f573a66579ae403fb
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e7e2e2318b1f085044126ba553a4e619842fc36d
    Patch