PT-2025-13225 · Linux+6 · Linux Kernel+6

Published 2025-02-03 · Updated 2026-04-20 · CVE-2025-21888

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the RDMA/mlx5 component. The issue occurs when deregistering memory regions of type DM (device memory), which do not have an associated umem. This results in a WARN during the dereg mr process. The problem is caused by the code incorrectly taking the wrong branch, attempting to call dma unmap single() on a DMA address that is not mapped.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-703

Related Identifiers

AZL-62842

AZL-69018

BDU:2026-01441

CVE-2025-21888

ECHO-E586-FC77-6502

OESA-2025-1446

OESA-2025-1450

OPENSUSE-SU-2025_1177-1

OPENSUSE-SU-2025_1178-1

OPENSUSE-SU-2025_1180-1

RHSA-2025:6966

RHSA-2025_6966

SUSE-SU-2025:01918-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:1177-1

SUSE-SU-2025:1178-1

SUSE-SU-2025:1180-1

SUSE-SU-2025:20190-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20260-1

SUSE-SU-2025:20270-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01967-1

SUSE-SU-2025_02262-1

SUSE-SU-2025_1177-1

SUSE-SU-2025_1178-1

SUSE-SU-2025_1180-1

USN-7514-1

USN-7521-1

USN-7521-2

USN-7521-3

USN-7522-1

USN-7764-1

USN-7764-2

USN-7766-1

USN-7767-1

USN-7767-2

USN-7774-1

USN-7774-2

USN-7774-3

USN-7774-4

USN-7774-5

USN-7775-1

USN-7775-2

USN-7775-3

USN-7776-1

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Hat

Suse

Ubuntu

References · 2443

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21888.json · Exploit
• https://git.kernel.org/stable/c/f1298cad47ae29828c5c5be77e733ccfcaef6a7f · Patch
• https://ubuntu.com/security/CVE-2024-57999 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56709 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7521-3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21765 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21780 · Security Note
• https://ubuntu.com/security/notices/USN-7766-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38206 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21964 · Security Note
• https://ubuntu.com/security/notices/USN-7767-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21999 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21917 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21741 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21909 · Vendor Advisory