CVE-2025-21798

firewire: test: Fix potential null dereference in firewire kunit test

State: Published
Severity: 5.5 Medium
Published: Feb 27, 2025
Updated: May 11, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

firewire: test: Fix potential null dereference in firewire kunit test

kunit_kzalloc() may return a NULL pointer, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for test_state.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	1c8506d62624fbc57db75414a387f365da8422e9 to before c6896bf4c611c3dd126f3e03685f2360a18b3d6fAffected 1c8506d62624fbc57db75414a387f365da8422e9 to before 70fcb25472d90dd3b87cbee74b9eb68670b0c7b8Affected 1c8506d62624fbc57db75414a387f365da8422e9 to before 352fafe97784e81a10a7c74bd508f71a19b53c2aAffected
LinuxLinux	6.8Affected before 6.8Not affected 6.12.13 through 6.12.Not affected 6.13.2 through 6.13.Not affected 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.