CVE-2025-21848: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
Published Mar 12, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
nfp: bpf: Add check for nfpappctrlmsgalloc()
Add check for the return value of nfpappctrlmsgalloc() in nfpbpfcmsgalloc() to prevent null pointer dereference.
Affected Software
12 affected components
Linux Linux kernel
Linux Linux kernel>=4.16<6.1.130
Linux Linux kernel>=6.2<6.6.80
Linux Linux kernel>=6.7<6.12.17
Linux Linux kernel>=6.13<6.13.5
Linux Linux kernel=6.14-rc1
Linux Linux kernel=6.14-rc2
Linux Linux kernel=6.14-rc3
IBM Verify Identity Access<=11.0 - 11.0.2
IBM Security Verify Access<=10.0 - 10.0.9.1
IBM Verify Identity Access Container<=11.0 - 11.0.2
IBM Security Verify Access Container<=10.0 - 10.0.9.1
Event History
Mar 12, 2025
CVE Published
via MITRE·09:42 AM
Data Sourced
via MITRE·09:42 AM
Description
Data Sourced
via NVD·10:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via Red Hat·12:24 PM
DescriptionSeverityAffected Software
Jul 8, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21848?
CVE-2025-21848 has been classified as a moderate severity vulnerability affecting the Linux kernel.
2
How do I fix CVE-2025-21848?
To fix CVE-2025-21848, you should upgrade to a patched version of the Linux kernel that addresses the vulnerability.
3
What type of vulnerability is CVE-2025-21848?
CVE-2025-21848 is a null pointer dereference vulnerability found in the Linux kernel.
4
Which versions of Linux kernel are affected by CVE-2025-21848?
CVE-2025-21848 affects specific versions of the Linux kernel where the vulnerability has not been patched.
5
What component of Linux is impacted by CVE-2025-21848?
CVE-2025-21848 impacts the network function programming (nfp) component within the Linux kernel.