NULL pointer dereference in Linux kernel nfp bpf driver

1) NULL pointer dereference

EUVDB-ID: #VU105662

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-21848

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the nfp_bpf_cmsg_alloc() function in drivers/net/ethernet/netronome/nfp/bpf/cmsg.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 6.13 - 6.13.4

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:6.13:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.13.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.13.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.13.3:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:6.13.4:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/1358d8e07afdf21d49ca6f00c56048442977e00a
https://git.kernel.org/stable/c/29ccb1e4040da6ff02b7e64efaa2f8e6bf06020d
https://git.kernel.org/stable/c/878e7b11736e062514e58f3b445ff343e6705537
https://git.kernel.org/stable/c/897c32cd763fd11d0b6ed024c52f44d2475bb820
https://git.kernel.org/stable/c/bd97f60750bb581f07051f98e31dfda59d3a783b
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.13.5

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.