CVE-2025-21903

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel, specifically the mctp i3c component. It involves handling a NULL header address. The daddr can be NULL if there is no neighbour table entry present, in which case the tx packet should be dropped. The saddr is usually set by the MCTP core, but there is a check for NULL in case a packet is transmitted by a different protocol.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.