CVE-2025-21904

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-21904
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21904.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-21904
Downstream
Related
Published
2025-04-01T15:40:45.881Z
Modified
2026-03-20T12:41:14.424584Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
caif_virtio: fix wrong pointer check in cfv_probe()
Details

In the Linux kernel, the following vulnerability has been resolved:

caifvirtio: fix wrong pointer check in cfvprobe()

delvqs() frees virtqueues, therefore cfv->vqtx pointer should be checked for NULL before calling it, not cfv->vdev. Also the current implementation is redundant because the pointer cfv->vdev is dereferenced before it is checked for NULL.

Fix this by checking cfv->vqtx for NULL instead of cfv->vdev before calling delvqs().

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21904.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0d2e1a2926b1839a4b74519e660739b2566c9386
Fixed
990fff6980d0c1693d60a812f58dbf93eab0473f
Fixed
7b5fe58959822e6cfa884327cabba6be3b01883d
Fixed
8e4e08ca4cc634b337bb74bc9a70758fdeda0bcb
Fixed
29e0cd296c87240278e2f7ea4cf3f496b60c03af
Fixed
90d302619ee7ce5ed0c69c29c290bdccfde66418
Fixed
56cddf71cce3b15b078e937fadab29962b6f6643
Fixed
597c27e5f04cb50e56cc9aeda75d3e42b6b89c3e
Fixed
a466fd7e9fafd975949e5945e2f70c33a94b1a70

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21904.json"