CVE-2025-21798: firewire: test: Fix potential null dereference in firewire kunit test
In the Linux kernel, the following vulnerability has been resolved:
firewire: test: Fix potential null dereference in firewire kunit test
kunitkzalloc() may return a NULL pointer, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for teststate.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Add a NULL check for test_state in the Linux kernel firewire KUnit test before dereferencing it, because kunit_kzalloc() may return a NULL pointer.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21798?
CVE-2025-21798 is classified as a medium severity vulnerability due to the potential for a NULL dereference in the Linux kernel.
How do I fix CVE-2025-21798?
To fix CVE-2025-21798, users should upgrade to the latest Linux kernel version where this vulnerability has been addressed.
What could happen if CVE-2025-21798 is exploited?
Exploiting CVE-2025-21798 could result in a system crash or unexpected behavior due to a NULL pointer dereference.
Which versions of the Linux kernel are affected by CVE-2025-21798?
CVE-2025-21798 affects previous versions of the Linux kernel prior to the patch that mitigates the vulnerability.
What specific area of the Linux kernel is impacted by CVE-2025-21798?
CVE-2025-21798 impacts the FireWire subsystem and specifically the kunit testing framework within the Linux kernel.