CVE-2025-21934

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-21934
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21934.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-21934
Downstream
Related
Published
2025-04-01T15:41:02Z
Modified
2026-08-12T03:30:34Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
rapidio: fix an API misues when rio_add_net() fails
Details

In the Linux kernel, the following vulnerability has been resolved:

rapidio: fix an API misues when rio_add_net() fails

rio_add_net() calls device_register() and fails when device_register() fails. Thus, put_device() should be used rather than kfree(). Add "mport->net = NULL;" to avoid a use after free issue.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21934.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e8de370188d098bb49483c287b44925957c3c9b6
Fixed
d4ec862ce80f64db923a1d942b5d11cf6fc87d36
Fixed
88ddad53e4cfb6de861c6d4fb7b25427f46baed5
Fixed
cdd9f58f7fe41a55fae4305ea51fc234769fd466
Fixed
a5f5e520e8fbc6294020ff8afa36f684d92c6e6a
Fixed
2537f01d57f08c527e40bbb5862aa6ff43344898
Fixed
22e4977141dfc6d109bf29b495bf2187b4250990
Fixed
f0aa4ee1cbbf7789907e5a3f6810de01c146c211
Fixed
b2ef51c74b0171fde7eb69b6152d3d2f743ef269

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21934.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.6.0
Fixed
5.4.291
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.235
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.179
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.131
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.83
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.19
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21934.json"