CVE-2025-21848

Updated: 2025-05-05 17:15:07.321578

Description:

In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value of nfp_app_ctrl_msg_alloc() in nfp_bpf_cmsg_alloc() to prevent null pointer dereference.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2025-03-17 23:15:49
AlmaLinux 9.6 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2025-07-05 02:18:06
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2025-03-17 23:15:48
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2025-03-17 23:15:49
CentOS Stream 8 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2025-03-17 23:15:48
Oracle Linux 7 ELS kernel-uek 5.4.17 5.5 MEDIUM Released CLSA-2025:1746479711 2025-05-08 04:11:24
Ubuntu 18.04 ELS linux 4.15.0 5.5 MEDIUM Not Vulnerable 2025-06-06 01:33:20
Ubuntu 20.04 ELS linux 5.4.0 5.5 MEDIUM Ignored 2025-06-24 00:42:00