Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-21848 Details

Description

In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value of nfp_app_ctrl_msg_alloc() in nfp_bpf_cmsg_alloc() to prevent null pointer dereference.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CNA: CISA-ADPCVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://cert-portal.siemens.com/productcert/html/ssa-082556.html	siemens-SADP
https://git.kernel.org/stable/c/1358d8e07afdf21d49ca6f00c56048442977e00a	kernel.org	Patch
https://git.kernel.org/stable/c/29ccb1e4040da6ff02b7e64efaa2f8e6bf06020d	kernel.org	Patch
https://git.kernel.org/stable/c/878e7b11736e062514e58f3b445ff343e6705537	kernel.org	Patch
https://git.kernel.org/stable/c/897c32cd763fd11d0b6ed024c52f44d2475bb820	kernel.org	Patch
https://git.kernel.org/stable/c/924b239f9704566e0d86abd894d2d64bd73c11eb	kernel.org	Patch
https://git.kernel.org/stable/c/bd97f60750bb581f07051f98e31dfda59d3a783b	kernel.org	Patch
https://git.kernel.org/stable/c/d64c6ca420019712e194fe095b55f87363e22a9a	kernel.org	Patch
https://git.kernel.org/stable/c/e976ea6c5e1b005c64467cbf94a8577aae9c7d81	kernel.org	Patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html	CVE
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html	CVE

see all 11 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-476	NULL Pointer Dereference	[email protected]
CWE-476	NULL Pointer Dereference	CISA-ADP

Affected Products

Product	Versions
linux linux kernel	>= 4.16, < 6.1.130 >= 6.2, < 6.6.80 >= 6.7, < 6.12.17 >= 6.13, < 6.13.5 6.14 rc1
CPE cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel:6.14:rc1:::::: cpe:2.3:o:linux:linux_kernel:6.14:rc2:::::: cpe:2.3:o:linux:linux_kernel:6.14:rc3:::::: Remediation No remediation found in references.

Change History

9 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	siemens-SADP
Jun 17, 2026	CVE Modified	CISA-ADP
May 12, 2026	CVE Modified	siemens-SADP
Nov 3, 2025	CVE Modified	CVE
Oct 1, 2025	CVE Modified	CISA-ADP
Mar 13, 2025	Initial Analysis	[email protected]
Mar 13, 2025	CVE Modified	kernel.org
Mar 12, 2025	New CVE Received	kernel.org