CVE-2025-22050

usbnet:fix NPE during rx_complete

State: Published
Severity: Not scored
Published: Apr 16, 2025
Updated: May 23, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

usbnet:fix NPE during rx_complete

Missing usbnet_going_away Check in Critical Path. The usb_submit_urb function lacks a usbnet_going_away validation, whereas __usbnet_queue_skb includes this check.

This inconsistency creates a race condition where: A URB request may succeed, but the corresponding SKB data fails to be queued.

Subsequent processes: (e.g., rx_complete → defer_bh → __skb_unlink(skb, list)) attempt to access skb->next, triggering a NULL pointer dereference (Kernel Panic).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b80aacfea6e8d6ed6e430aa13922d6ccf044415a to before 95789c2f94fd29dce8759f9766baa333f749287cAffected 869caa8de8cb94514df704ccbe0b024fda4b9398 to before 0f10f83acfd619e13c64d6705908dfd792f19544Affected 1e44ee6cdd123d6cfe78b4a94e1572e23bbb58ce to before acacd48a37b52fc95f621765762c04152b58d642Affected 04e906839a053f092ef53f4fb2d610983412b904 to before d689645cd1594ea1d13cb0c404f8ad1011353e0eAffected 04e906839a053f092ef53f4fb2d610983412b904 to before 0c30988588b28393e3e8873d5654f910e86391baAffected 04e906839a053f092ef53f4fb2d610983412b904 to before fd9ee3f0d6a53844f65efde581c91bbb0ff749acAffected 04e906839a053f092ef53f4fb2d610983412b904 to before 51de3600093429e3b712e5f091d767babc5dd6dfAffected ca124236cd14e61610f56df9a8f81376a1ffe660Affected 54671d731f4977fb3c0c26f2840655b5204e4437Affected 5.15.168 to before 5.15.180Affected 6.1.113 to before 6.1.134Affected 6.6.54 to before 6.6.87Affected 6.10.13 to before 6.11Affected 6.11.2 to before 6.12Affected
LinuxLinux	6.12Affected before 6.12Not affected 5.15.180 through 5.15.Not affected 6.1.134 through 6.1.Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

b80aacfea6e8d6ed6e430aa13922d6ccf044415a to before 95789c2f94fd29dce8759f9766baa333f749287cAffected
869caa8de8cb94514df704ccbe0b024fda4b9398 to before 0f10f83acfd619e13c64d6705908dfd792f19544Affected
1e44ee6cdd123d6cfe78b4a94e1572e23bbb58ce to before acacd48a37b52fc95f621765762c04152b58d642Affected
04e906839a053f092ef53f4fb2d610983412b904 to before d689645cd1594ea1d13cb0c404f8ad1011353e0eAffected
04e906839a053f092ef53f4fb2d610983412b904 to before 0c30988588b28393e3e8873d5654f910e86391baAffected
04e906839a053f092ef53f4fb2d610983412b904 to before fd9ee3f0d6a53844f65efde581c91bbb0ff749acAffected
04e906839a053f092ef53f4fb2d610983412b904 to before 51de3600093429e3b712e5f091d767babc5dd6dfAffected
ca124236cd14e61610f56df9a8f81376a1ffe660Affected
54671d731f4977fb3c0c26f2840655b5204e4437Affected
5.15.168 to before 5.15.180Affected
6.1.113 to before 6.1.134Affected
6.6.54 to before 6.6.87Affected
6.10.13 to before 6.11Affected
6.11.2 to before 6.12Affected

LinuxLinux

6.12Affected
before 6.12Not affected
5.15.180 through 5.15.*Not affected
6.1.134 through 6.1.*Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.