PT-2025-14322 · Linux+7 · Linux Kernel+7

Published 2025-02-26 · Updated 2026-04-20 · CVE-2025-21941

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference issue could occur when pipe ctx->plane state is null. The fix adds a check to ensure pipe ctx->plane state is not null before accessing, preventing a null pointer dereference. This issue was found by code review.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2025-12647

ALT-PU-2025-5437

ALT-PU-2025-5786

ALT-PU-2025-6075

ALT-PU-2025-6382

ALT-PU-2025-6606

AZL-59763

AZL-59883

BDU:2025-04647

CVE-2025-21941

DLA-4178-1

DLA-4193-1

DSA-5900-1

ECHO-0282-B761-3ABB

OESA-2025-1446

OESA-2025-1450

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01707-1

SUSE-SU-2025:01600-1

SUSE-SU-2025:01614-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20206-1

SUSE-SU-2025:20270-1

SUSE-SU-2025:20283-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

USN-7591-1

USN-7591-2

USN-7591-3

USN-7591-4

USN-7591-5

USN-7591-6

USN-7592-1

USN-7593-1

USN-7597-1

USN-7597-2

USN-7598-1

USN-7602-1

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7655-1

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2350

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21941.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-21780 · Security Note
• https://ubuntu.com/security/CVE-2025-37811 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7764-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21871 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37740 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37798 · Vendor Advisory
• https://git.kernel.org/stable/c/e0345c3478f185ca840daac7f08a1fcd4ebec3e9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-21941 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21927 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21914 · Security Note
• https://ubuntu.com/security/CVE-2025-23147 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7593-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21978 · Vendor Advisory