CVE-2025-21775 – Linux Kernel: CAN: ctucanfd Skb Allocation Null Pointer Dereference

The following table lists the changes that have been made to the
CVE-2025-21775 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Feb. 27, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    can: ctucanfd: handle skb allocation failure

    If skb allocation fails, the pointer to struct can_frame is NULL. This
    is actually handled everywhere inside ctucan_err_interrupt() except for
    the only place.

    Add the missed NULL check.

    Found by Linux Verification Center (linuxtesting.org) with SVACE static
    analysis tool.

    Added Reference https://git.kernel.org/stable/c/84b9ac59978a6a4e0812d1c938fad97306272cef
    Added Reference https://git.kernel.org/stable/c/9bd24927e3eeb85642c7baa3b28be8bea6c2a078
    Added Reference https://git.kernel.org/stable/c/b0e592dd46a0a952b41c3bf6c963afdd6a42b526
    Added Reference https://git.kernel.org/stable/c/e505b83b9ee6aa0ae2f4395f573a66579ae403fb
    Added Reference https://git.kernel.org/stable/c/e7e2e2318b1f085044126ba553a4e619842fc36d
Share the Post:

Related Posts