CVE-2025-21980
Published: Apr 1, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. This, in turn, calls gred_offload, where memset could receive a NULL pointer as input, potentially leading to a kernel crash. When table->opt is NULL in gred_init(), gred_change_table_def() is not called yet, so it is not necessary to call ->ndo_setup_tc() in gred_offload().
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected f25c0515c521375154c62c72447869f40218c861 - < d02c9acd68950a444acda18d514e2b41f846cb7faffected f25c0515c521375154c62c72447869f40218c861 - < 0f0a152957d64ce45b4c27c687e7d087e8f45079affected f25c0515c521375154c62c72447869f40218c861 - < 68896dd50180b38ea552e49a6a00b685321e5769affected f25c0515c521375154c62c72447869f40218c861 - < 5f996b4f80c2cef1f9c77275055e7fcba44c9199affected f25c0515c521375154c62c72447869f40218c861 - < 115ef44a98220fddfab37a39a19370497cd718b9 |
Linux | Linux | affected 5.16unaffected 0 - < 5.16unaffected 6.1.132 - <= 6.1.*unaffected 6.6.84 - <= 6.6.*unaffected 6.12.20 - <= 6.12.*+2 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now