Riskcovery

CVE-2025-21980

sched: address a potential NULL pointer dereference in the GRED scheduler.

State
Published
Severity
5.5 Medium
Published
Apr 1, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

sched: address a potential NULL pointer dereference in the GRED scheduler.

If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. This, in turn, calls gred_offload, where memset could receive a NULL pointer as input, potentially leading to a kernel crash.

When table->opt is NULL in gred_init(), gred_change_table_def() is not called yet, so it is not necessary to call ->ndo_setup_tc() in gred_offload().

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • f25c0515c521375154c62c72447869f40218c861 to before d02c9acd68950a444acda18d514e2b41f846cb7fAffected
  • f25c0515c521375154c62c72447869f40218c861 to before 0f0a152957d64ce45b4c27c687e7d087e8f45079Affected
  • f25c0515c521375154c62c72447869f40218c861 to before 68896dd50180b38ea552e49a6a00b685321e5769Affected
  • f25c0515c521375154c62c72447869f40218c861 to before 5f996b4f80c2cef1f9c77275055e7fcba44c9199Affected
  • f25c0515c521375154c62c72447869f40218c861 to before 115ef44a98220fddfab37a39a19370497cd718b9Affected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 6.1.132 through 6.1.*Not affected
  • 6.6.84 through 6.6.*Not affected
  • 6.12.20 through 6.12.*Not affected
  • 6.13.8 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.