NetSight
IP …
medium5.5

CVE-2025-21904

In the Linux kernel, the following vulnerability has been resolved: caif_virtio: fix wrong pointer check in cfv_probe() del_vqs() frees virtqueues, therefore c…

Impact

In the Linux kernel, the following vulnerability has been resolved: caif_virtio: fix wrong pointer check in cfv_probe() del_vqs() frees virtqueues, therefore cfv->vq_tx pointer should be checked for NULL before calling it, not cfv->vdev. Also the current implementation is redundant because the pointer cfv->vdev is dereferenced before it is checked for NULL. Fix this by checking cfv->vq_tx for NULL instead of cfv->vdev before calling del_vqs().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.10 before 5.4.291
from 5.5 before 5.10.235
from 5.11 before 5.15.179
from 5.16 before 6.1.131
from 6.2 before 6.6.83
from 6.7 before 6.12.19

Weakness classification

CWE-476

References