Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-21903

mctp i3c: handle NULL header address

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mctp i3c: handle NULL header address daddr can be NULL if there is no neighbour table entry present, in that case the tx packet should be dropped. saddr will usually be set by MCTP core, but check for NULL in case a packet is transmitted by a different protocol.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c8755b29b58ec65be17bcb8c40763d2dcb1f1db5 to < d8be54c35aee29d96d1350b1b6f153be4da37c07affected
  • c8755b29b58ec65be17bcb8c40763d2dcb1f1db5 to < 740bf9c9b715cc327d34b1e2d4ee79fcd4c47a56affected
  • c8755b29b58ec65be17bcb8c40763d2dcb1f1db5 to < cf7ee25e70c6edfac4553d6b671e8b19db1d9573affected

Linux Linux

Default version status: affected

  • 6.7affected
  • 0 to < 6.7unaffected
  • 6.12.19 to ≤ 6.12.*unaffected
  • 6.13.7 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References