CVE-2025-21847

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() The nullity of sps->cstream should be checked similarly as it is done in sof_set_stream_data_offset() function. Assuming that it is not NULL if sps->stream is NULL is incorrect and can lead to NULL pointer dereference.

Rincian

Terbit di NVD

12 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/2b3878baf90918a361a3dfd3513025100b1b40b6 patch
• https://git.kernel.org/stable/c/62ab1ae5511c59b5f0bf550136ff321331adca9f patch
• https://git.kernel.org/stable/c/6c18f5eb2043ebf4674c08a9690218dc818a11ab patch
• https://git.kernel.org/stable/c/d8d99c3b5c485f339864aeaa29f76269cc0ea975 patch
• https://git.kernel.org/stable/c/dfe25c554daa12ee26eb3540bbded57733ed5d9c