NetSight
IP …
medium5.5

CVE-2025-21848

In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value of nfp_app_…

Impact

In the Linux kernel, the following vulnerability has been resolved: nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() Add check for the return value of nfp_app_ctrl_msg_alloc() in nfp_bpf_cmsg_alloc() to prevent null pointer dereference.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.16 before 6.1.130
from 6.2 before 6.6.80
from 6.7 before 6.12.17
from 6.13 before 6.13.5
Version 6.14

Weakness classification

CWE-476

References