SB2025022855 - NULL pointer dereference in Linux kernel base driver
Published: February 28, 2025 Updated: May 11, 2025
Security Bulletin ID
SB2025022855
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2025-21810)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the class_dev_iter_init() and class_dev_iter_next() functions in drivers/base/class.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1614e75d1a1b63db6421c7a4bf37004720c7376c
- https://git.kernel.org/stable/c/5c504e9767b947cf7d4e29b811c0c8b3c53242b7
- https://git.kernel.org/stable/c/e128f82f7006991c99a58114f70ef61e937b1ac1
- https://git.kernel.org/stable/c/f4b9bc823b0cfdebfed479c0e87d6939c7562e87
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.76