Log in Start free

Vulnerability · Published Feb 27, 2025 · Assigned by Linux

CVE-2025-21798firewire: test: Fix potential null dereference in firewire kunit test

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 87.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: firewire: test: Fix potential null dereference in firewire kunit test kunit_kzalloc() may return a NULL pointer, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for test_state.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.12.13-1DEBIAN-CVE-2025-21798
Debian:14linux6.12.13-1DEBIAN-CVE-2025-21798
Ubuntu:24.04:LTSlinux6.8.0-64.67UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-aws6.8.0-1032.34UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1032.34~22.04.1UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-azure6.8.0-1034.39UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1015.15~24.04.1UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1034.39~22.04.1UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1022.23UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-gcp6.8.0-1033.35UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1015.15~24.04.1UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1033.35~22.04.1UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-gke6.8.0-1028.32UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1015.17UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-26.26~24.04.1UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-64.67~22.04.1UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-ibm6.8.0-1029.29UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1029.29~22.04.1UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-64.67.1UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1014.15~24.04.1UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-64.67.1~22.04.1UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1031.34UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1010.10UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1031.34~22.04.1UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1031.34.1UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1008.8UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1022.22UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1031.31UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-oracle6.8.0-1029.30UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1029.30~22.04.1UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-raspi6.8.0-1031.35UBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-64.67~22.04.1UBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21798
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21798
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2025-21798

Affected products (as reported)

VendorProductVersions
Linux Linux 1c8506d62624fbc57db75414a387f365da8422e9 – before c6896bf4c611c3dd126f3e03685f2360a18b3d6f1c8506d62624fbc57db75414a387f365da8422e9 – before 70fcb25472d90dd3b87cbee74b9eb68670b0c7b81c8506d62624fbc57db75414a387f365da8422e9 – before 352fafe97784e81a10a7c74bd508f71a19b53c2a
Linux Linux 6.8

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References