In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix NULL pointer access Resources should be released only after all threads that utilize them have been destroyed. This commit ensures that resources are not released prematurely by waiting for the associated workqueue to complete before deallocating them.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/079a3e52f3e751bb8f5937195bdf25c5d14fdff0 cve-icon cve-icon
https://git.kernel.org/stable/c/46fba7be161bb89068958138ea64ec33c0b446d4 cve-icon cve-icon
https://git.kernel.org/stable/c/592a0327d026a122e97e8e8bb7c60cbbe7697344 cve-icon cve-icon
https://git.kernel.org/stable/c/7a735a8a46f6ebf898bbefd96659ca5da798bce0 cve-icon cve-icon
https://git.kernel.org/stable/c/b13abcb7ddd8d38de769486db5bd917537b32ab1 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025040131-CVE-2025-21918-dc4c@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-21918 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-21918 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 11 Apr 2025 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Mon, 07 Apr 2025 08:45:00 +0000

Type Values Removed Values Added
References

Wed, 02 Apr 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 01 Apr 2025 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix NULL pointer access Resources should be released only after all threads that utilize them have been destroyed. This commit ensures that resources are not released prematurely by waiting for the associated workqueue to complete before deallocating them.
Title usb: typec: ucsi: Fix NULL pointer access
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-04-01T15:40:53.561Z

Updated: 2025-10-01T19:26:33.991Z

Reserved: 2024-12-29T08:45:45.787Z

Link: CVE-2025-21918

cve-icon Vulnrichment

Updated: 2025-10-01T14:37:41.242Z

cve-icon NVD

Status : Modified

Published: 2025-04-01T16:15:22.457

Modified: 2025-10-01T20:18:33.320

Link: CVE-2025-21918

cve-icon Redhat

Severity : Low

Publid Date: 2025-04-01T00:00:00Z

Links: CVE-2025-21918 - Bugzilla