logo_clicknbuy.png

CVE-2025-21773 – “Linux Kernel Can etas_es58x NULL Pointer Dereference Vulnerability”

The following table lists the changes that have been made to the
CVE-2025-21773 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Feb. 27, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    can: etas_es58x: fix potential NULL pointer dereference on udev->serial

    The driver assumed that es58x_dev->udev->serial could never be NULL.
    While this is true on commercially available devices, an attacker
    could spoof the device identity providing a NULL USB serial number.
    That would trigger a NULL pointer dereference.

    Add a check on es58x_dev->udev->serial before accessing it.
    Added Reference https://git.kernel.org/stable/c/1590667a60753ee5a54871f2840ceefd4a7831fa
    Added Reference https://git.kernel.org/stable/c/5059ea98d7bc133903d3e47ab36df6ed11d0c95f
    Added Reference https://git.kernel.org/stable/c/722e8e1219c8b6ac2865011fe339315d6a8d0721
    Added Reference https://git.kernel.org/stable/c/a1ad2109ce41c9e3912dadd07ad8a9c640064ffb
Share the Post:

Related Posts