CVE-2025-21982

Published Apr 1, 2025

Last updated 2 months ago

CVSS medium 5.5

Overview

Description: In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw devm_kasprintf() calls can return null pointers on failure. But the return values were not checked in npcm8xx_gpio_fw(). Add NULL check in npcm8xx_gpio_fw(), to handle kernel NULL pointer dereference error.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-476

Hype score: Not currently trending

CVE-2025-21982 In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw devm_kasprintf() calls can return n… https://t.co/7EHFr6O8uN
@CVEnew
1 Apr 2025
176 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "60E9C5DF-D778-4572-848A-5D6CFFE022CA",
            "versionEndExcluding": "6.12.20",
            "versionStartIncluding": "6.7"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0A20D4D7-B329-4C68-B662-76062EA7DCF0",
            "versionEndExcluding": "6.13.8",
            "versionStartIncluding": "6.13"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "186716B6-2B66-4BD0-852E-D48E71C0C85F"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D3E781C-403A-498F-9DA9-ECEE50F41E75"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "66619FB8-0AAF-4166-B2CF-67B24143261D"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D3D6550E-6679-4560-902D-AF52DCFE905B"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "45B90F6B-BEC7-4D4E-883A-9DBADE021750"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1759FFB7-531C-41B1-9AE1-FD3D80E0D920"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Weaknesses

Social media

Configurations

References