CVE-2025-21773

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential NULL pointer dereference issue was found in the Linux kernel, specifically in the etas es58x driver. The driver incorrectly assumed that es58x dev->udev->serial could never be NULL. However, an attacker could potentially spoof the device identity by providing a NULL USB serial number, triggering a NULL pointer dereference. The issue was resolved by adding a check on es58x dev->udev->serial before accessing it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.