CVE-2025-21873

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A crash can occur in the Linux kernel when the arpmb command fails due to the device not supporting it. This happens because user data is copied in bsg transport sg io fn(), leading to a memory crash. The issue arises when ufs bsg exec advanced rpmb req() returns an error, and the job's reply len is not set. A memory crash backtrace is provided, showing the call trace and error messages, including "ARPMB OP failed: error code -22".

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.