In the Linux kernel, the following vulnerability has been resolved:
sched: address a potential NULL pointer dereference in the GRED scheduler.
If kzalloc in gred_init returns a NULL pointer, the code follows the
error handling path, invoking gred_destroy. This, in turn, calls
gred_offload, where memset could receive a NULL pointer as input,
potentially leading to a kernel crash.
When table->opt is NULL in gred_init(), gred_change_table_def()
is not called yet, so it is not necessary to call ->ndo_setup_tc()
in gred_offload().
References
Configurations
Configuration 1 (hide)
|
History
10 Apr 2025, 13:25
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/68896dd50180b38ea552e49a6a00b685321e5769 - Patch | |
| References | () https://git.kernel.org/stable/c/d02c9acd68950a444acda18d514e2b41f846cb7f - Patch | |
| References | () https://git.kernel.org/stable/c/0f0a152957d64ce45b4c27c687e7d087e8f45079 - Patch | |
| References | () https://git.kernel.org/stable/c/5f996b4f80c2cef1f9c77275055e7fcba44c9199 - Patch | |
| References | () https://git.kernel.org/stable/c/115ef44a98220fddfab37a39a19370497cd718b9 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-476 | |
| First Time |
Linux linux Kernel
Linux |
01 Apr 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-01 16:15
Updated : 2025-04-10 13:25
NVD link : CVE-2025-21980
Mitre link : CVE-2025-21980
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference