Log in Start free

Vulnerability · Published Feb 27, 2025 · Assigned by Linux

CVE-2025-21773can: etas_es58x: fix potential NULL pointer dereference on udev->serial

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 87.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: fix potential NULL pointer dereference on udev->serial The driver assumed that es58x_dev->udev->serial could never be NULL. While this is true on commercially available devices, an attacker could spoof the device identity providing a NULL USB serial number. That would trigger a NULL pointer dereference. Add a check on es58x_dev->udev->serial before accessing it.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.12.16-1DEBIAN-CVE-2025-21773
Debian:14linux6.12.16-1DEBIAN-CVE-2025-21773
Ubuntu:24.04:LTSlinux6.8.0-78.78USN-7703-1
Ubuntu:24.04:LTSlinux6.8.0-78.78UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-aws6.8.0-1035.37USN-7703-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1035.37UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1035.37~22.04.1UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1035.37~22.04.1USN-7703-2
Ubuntu:24.04:LTSlinux-azure6.8.0-1034.39UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1015.15~24.04.1UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1034.39~22.04.1UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1022.23UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-gcp6.8.0-1036.38USN-7703-2
Ubuntu:24.04:LTSlinux-gcp6.8.0-1036.38UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1015.15~24.04.1UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1036.38~22.04.1USN-7703-2
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1036.38~22.04.1UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-gke6.8.0-1032.36USN-7703-4
Ubuntu:24.04:LTSlinux-gke6.8.0-1032.36UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1019.21UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1019.21USN-7703-2
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-26.26~24.04.1UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-78.78~22.04.1UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-78.78~22.04.1USN-7703-4
Ubuntu:24.04:LTSlinux-ibm6.8.0-1033.33UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-ibm6.8.0-1033.33USN-7703-2
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1033.33~22.04.1USN-7703-2
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1033.33~22.04.1UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-78.78.1UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-78.78.1USN-7703-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1014.15~24.04.1UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-78.78.1~22.04.1USN-7703-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-78.78.1~22.04.1UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1035.38UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1035.38USN-7703-4
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1010.10UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1035.38~22.04.1UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1035.38~22.04.1USN-7703-4
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1035.38.1USN-7703-4
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1035.38.1UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1009.9UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1022.22UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-oracle6.8.0-1032.33USN-7703-3
Ubuntu:24.04:LTSlinux-oracle6.8.0-1032.33UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1032.33~22.04.1UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1032.33~22.04.1USN-7703-3
Ubuntu:24.04:LTSlinux-raspi6.8.0-1035.39USN-7703-4
Ubuntu:24.04:LTSlinux-raspi6.8.0-1035.39UBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-78.78~22.04.1UBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21773
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21773
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2025-21773

Affected products (as reported)

VendorProductVersions
Linux Linux 9f06631c3f1f0f298536443df85a6837ba4c5f5c – before 1590667a60753ee5a54871f2840ceefd4a7831fa9f06631c3f1f0f298536443df85a6837ba4c5f5c – before 722e8e1219c8b6ac2865011fe339315d6a8d07219f06631c3f1f0f298536443df85a6837ba4c5f5c – before 5059ea98d7bc133903d3e47ab36df6ed11d0c95f9f06631c3f1f0f298536443df85a6837ba4c5f5c – before a1ad2109ce41c9e3912dadd07ad8a9c640064ffb
Linux Linux 6.2

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References