Wind River Support Network

HomeDefectsLIN1022-14542
Fixed

LIN1022-14542 : Security Advisory - linux - CVE-2025-21904

Created: Apr 2, 2025    Updated: Jun 10, 2025
Resolved Date: May 28, 2025
Found In Version: 10.22.33.1
Fix Version: 10.22.33.21
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

caif_virtio: fix wrong pointer check in cfv_probe()

del_vqs() frees virtqueues, therefore cfv->vq_tx pointer should be checked
for NULL before calling it, not cfv->vdev. Also the current implementation
is redundant because the pointer cfv->vdev is dereferenced before it is
checked for NULL.

Fix this by checking cfv->vq_tx for NULL instead of cfv->vdev before
calling del_vqs().

CREATE(Triage):(User=admin) CVE-2025-21904 (https://nvd.nist.gov/vuln/detail/CVE-2025-21904)

CVEs


Live chat
Online