CVE-2025-21774

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21774
In the Linux kernel, the following vulnerability has been resolved: can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(): bail out if skb cannot be allocated Fix NULL pointer check in rkcanfd_handle_rx_fifo_overflow_int() to bail out if skb cannot be allocated.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/118fb35681bd2c0d2afa22f7be0ef94bb4d06849 Patch
https://git.kernel.org/stable/c/946750e7865df2e70045071051abf768785dd570 Patch
https://git.kernel.org/stable/c/f7f0adfe64de08803990dc4cbecd2849c04e314a Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
History

05 Mar 2025, 18:47

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(): salir si no se puede asignar skb Se corrige la comprobación del puntero NULL en rkcanfd_handle_rx_fifo_overflow_int() para salir si no se puede asignar skb.
CWE CWE-476
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/118fb35681bd2c0d2afa22f7be0ef94bb4d06849 - () https://git.kernel.org/stable/c/118fb35681bd2c0d2afa22f7be0ef94bb4d06849 - Patch
References () https://git.kernel.org/stable/c/946750e7865df2e70045071051abf768785dd570 - () https://git.kernel.org/stable/c/946750e7865df2e70045071051abf768785dd570 - Patch
References () https://git.kernel.org/stable/c/f7f0adfe64de08803990dc4cbecd2849c04e314a - () https://git.kernel.org/stable/c/f7f0adfe64de08803990dc4cbecd2849c04e314a - Patch

27 Feb 2025, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-27 03:15

Updated : 2025-10-01 20:18

NVD link : CVE-2025-21774

Mitre link : CVE-2025-21774

CVE.ORG link : CVE-2025-21774

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference