CVE-2025-21901

RDMA/bnxt_re: Add sanity checks on rdev validity

State: Published
Severity: 7.8 High
Published: Apr 1, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Add sanity checks on rdev validity

There is a possibility that ulp_irq_stop and ulp_irq_start callbacks will be called when the device is in detached state. This can cause a crash due to NULL pointer dereference as the rdev is already freed.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	cc5b9b48d44756a87170f3901c6c2fd99e6b89b2 to before aed1bc673907e3df372b317c10ff2f3582f8bf1aAffected cc5b9b48d44756a87170f3901c6c2fd99e6b89b2 to before 8cb0eef46d70a99c88c26a1addb7fd955242e0e6Affected cc5b9b48d44756a87170f3901c6c2fd99e6b89b2 to before f0df225d12fcb049429fb5bf5122afe143c2dd15Affected
LinuxLinux	6.12Affected before 6.12Not affected 6.12.18 through 6.12.Not affected 6.13.6 through 6.13.Not affected 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.