Riskcovery

CVE-2025-21833

iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE

State
Published
Severity
5.5 Medium
Published
Mar 6, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE

There is a WARN_ON_ONCE to catch an unlikely situation when domain_remove_dev_pasid can't find the `pasid`. In case it nevertheless happens we must avoid using a NULL pointer.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • d87731f609318a27e9aa3d01cf97798599d32839 to before 68ec78beb4a3fb0877cbaaf49758c85410c05977Affected
  • d87731f609318a27e9aa3d01cf97798599d32839 to before df96876be3b064aefc493f760e0639765d13ed0dAffected
  • d87731f609318a27e9aa3d01cf97798599d32839 to before 60f030f7418d3f1d94f2fb207fe3080e1844630bAffected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.57 through 6.12.*Not affected
  • 6.13.3 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.