CVE Database
/

CVE-2025-21980

Back to search

CVE-2025-21980

Published: Apr 1, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. This, in turn, calls gred_offload, where memset could receive a NULL pointer as input, potentially leading to a kernel crash. When table->opt is NULL in gred_init(), gred_change_table_def() is not called yet, so it is not necessary to call ->ndo_setup_tc() in gred_offload().

VendorProductVersions

Linux

Linux

affected
f25c0515c521375154c62c72447869f40218c861 - < d02c9acd68950a444acda18d514e2b41f846cb7f
affected
f25c0515c521375154c62c72447869f40218c861 - < 0f0a152957d64ce45b4c27c687e7d087e8f45079
affected
f25c0515c521375154c62c72447869f40218c861 - < 68896dd50180b38ea552e49a6a00b685321e5769
affected
f25c0515c521375154c62c72447869f40218c861 - < 5f996b4f80c2cef1f9c77275055e7fcba44c9199
affected
f25c0515c521375154c62c72447869f40218c861 - < 115ef44a98220fddfab37a39a19370497cd718b9

Linux

Linux

affected
5.16
unaffected
0 - < 5.16
unaffected
6.1.132 - <= 6.1.*
unaffected
6.6.84 - <= 6.6.*
unaffected
6.12.20 - <= 6.12.*

+2 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now