In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value of nfp_app_ctrl_msg_alloc() in nfp_bpf_cmsg_alloc() to prevent null pointer dereference.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/1358d8e07afdf21d49ca6f00c56048442977e00a cve-icon cve-icon
https://git.kernel.org/stable/c/29ccb1e4040da6ff02b7e64efaa2f8e6bf06020d cve-icon cve-icon
https://git.kernel.org/stable/c/878e7b11736e062514e58f3b445ff343e6705537 cve-icon cve-icon
https://git.kernel.org/stable/c/897c32cd763fd11d0b6ed024c52f44d2475bb820 cve-icon cve-icon
https://git.kernel.org/stable/c/924b239f9704566e0d86abd894d2d64bd73c11eb cve-icon cve-icon
https://git.kernel.org/stable/c/bd97f60750bb581f07051f98e31dfda59d3a783b cve-icon cve-icon
https://git.kernel.org/stable/c/d64c6ca420019712e194fe095b55f87363e22a9a cve-icon cve-icon
https://git.kernel.org/stable/c/e976ea6c5e1b005c64467cbf94a8577aae9c7d81 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025031212-CVE-2025-21848-30e8@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-21848 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-21848 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 12 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.0004}

 epss

{'score': 0.00055}

Fri, 21 Mar 2025 07:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-395

Thu, 13 Mar 2025 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 13 Mar 2025 13:00:00 +0000

Type Values Removed Values Added
References

Thu, 13 Mar 2025 02:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 12 Mar 2025 09:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value of nfp_app_ctrl_msg_alloc() in nfp_bpf_cmsg_alloc() to prevent null pointer dereference.
Title nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-03-12T09:42:04.263Z

Updated: 2025-10-01T19:26:39.138Z

Reserved: 2024-12-29T08:45:45.779Z

Link: CVE-2025-21848

cve-icon Vulnrichment

Updated: 2025-10-01T16:58:10.522Z

cve-icon NVD

Status : Modified

Published: 2025-03-12T10:15:17.230

Modified: 2025-10-01T20:18:28.600

Link: CVE-2025-21848

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-03-12T00:00:00Z

Links: CVE-2025-21848 - Bugzilla