PT-2025-4363 · Linux+6 · Linux Kernel+6

CVE-2025-21682

·

Published

2025-01-08

·

Updated

2026-08-25

CVSS v3.1

7.3

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a null pointer dereference in the Linux kernel's bnxt driver. This occurs when the XDP (eXpress Data Path) is detached, and the features are not recalculated, leading to a potential crash. The problem arises when the driver attempts to access a freed ring, resulting in a kernel NULL pointer dereference. The issue has been present since XDP support was added but did not cause major problems until a specific commit.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2025-12647
ALT-PU-2025-3467
AZL-56384
AZL-56414
BDU:2025-01484
CVE-2025-21682
ECHO-6A40-1D94-17DD
OESA-2025-1959
OESA-2025-1960
OESA-2025-1961
OPENSUSE-SU-2025_0428-1
OPENSUSE-SU-2025_0499-1
OPENSUSE-SU-2025_0557-1
SUSE-SU-2025:0428-1
SUSE-SU-2025:0499-1
SUSE-SU-2025:0557-1
SUSE-SU-2025:0564-1
SUSE-SU-2025:0565-1
SUSE-SU-2025:20165-1
SUSE-SU-2025:20166-1
SUSE-SU-2025:20248-1
SUSE-SU-2025:20249-1
SUSE-SU-2025_0428-1
SUSE-SU-2025_0499-1
SUSE-SU-2025_0557-1
USN-7445-1
USN-7448-1
USN-7595-1
USN-7595-2
USN-7595-3
USN-7595-4
USN-7595-5
USN-7596-1
USN-7596-2
USN-7653-1

Affected Products

Alt Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu