CVE-2025-21904

Summary

In the Linux kernel, the following vulnerability has been resolved:

caif_virtio: fix wrong pointer check in cfv_probe()

del_vqs() frees virtqueues, therefore cfv->vq_tx pointer should be checked for NULL before calling it, not cfv->vdev. Also the current implementation is redundant because the pointer cfv->vdev is dereferenced before it is checked for NULL.

Fix this by checking cfv->vq_tx for NULL instead of cfv->vdev before calling del_vqs().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux0d2e1a2926b1839a4b74519e660739b2566c9386 < 990fff6980d0c1693d60a812f58dbf93eab0473faffected
LinuxLinux0d2e1a2926b1839a4b74519e660739b2566c9386 < 7b5fe58959822e6cfa884327cabba6be3b01883daffected
LinuxLinux0d2e1a2926b1839a4b74519e660739b2566c9386 < 8e4e08ca4cc634b337bb74bc9a70758fdeda0bcbaffected
LinuxLinux0d2e1a2926b1839a4b74519e660739b2566c9386 < 29e0cd296c87240278e2f7ea4cf3f496b60c03afaffected
LinuxLinux0d2e1a2926b1839a4b74519e660739b2566c9386 < 90d302619ee7ce5ed0c69c29c290bdccfde66418affected
LinuxLinux0d2e1a2926b1839a4b74519e660739b2566c9386 < 56cddf71cce3b15b078e937fadab29962b6f6643affected
LinuxLinux0d2e1a2926b1839a4b74519e660739b2566c9386 < 597c27e5f04cb50e56cc9aeda75d3e42b6b89c3eaffected
LinuxLinux0d2e1a2926b1839a4b74519e660739b2566c9386 < a466fd7e9fafd975949e5945e2f70c33a94b1a70affected
LinuxLinux3.10affected
LinuxLinux0 < 3.10unaffected
LinuxLinux5.4.291 <= 5.4.*unaffected
LinuxLinux5.10.235 <= 5.10.*unaffected
LinuxLinux5.15.179 <= 5.15.*unaffected
LinuxLinux6.1.131 <= 6.1.*unaffected
LinuxLinux6.6.83 <= 6.6.*unaffected
LinuxLinux6.12.19 <= 6.12.*unaffected
LinuxLinux6.13.7 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References