CVE-2025-21833

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE There is a WARN_ON_ONCE to catch an unlikely situation when domain_remove_dev_pasid can't find the `pasid`. In case it nevertheless happens we must avoid using a NULL pointer.

CVSS Metrics

• v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.18%• Percentile: 8%

Techniques & Countermeasures

• CWE-476•NULL Pointer Dereference

  The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

• linux•linux

  ≥ d87731f609318a27e9aa3d01cf97798599d32839, < 68ec78beb4a3fb0877cbaaf49758c85410c05977 | ≥ d87731f609318a27e9aa3d01cf97798599d32839, < df96876be3b064aefc493f760e0639765d13ed0d | ≥ d87731f609318a27e9aa3d01cf97798599d32839, < 60f030f7418d3f1d94f2fb207fe3080e1844630b | 6.7

• linux•linux kernel

  < 6.13.3

References (3)

• https://git.kernel.org/stable/c/68ec78beb4a3fb0877cbaaf49758c85410c05977
• https://git.kernel.org/stable/c/df96876be3b064aefc493f760e0639765d13ed0d
• https://git.kernel.org/stable/c/60f030f7418d3f1d94f2fb207fe3080e1844630b