PT-2025-14363 · Linux+5 · Linux Kernel+5

Published 2025-02-25 · Updated 2026-04-20 · CVE-2025-21982

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference error in the Linux kernel has been resolved. The issue occurred because devm kasprintf() calls can return null pointers on failure, but the return values were not checked in npcm8xx gpio fw(). A NULL check has been added to npcm8xx gpio fw() to handle this error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

ALT-PU-2025-5786

BDU:2025-12181

CVE-2025-21982

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 277

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21982.json · Exploit
• https://git.kernel.org/stable/c/6a08a86e5aff8e65368ccd463348fdda26100821 · Patch
• https://ubuntu.com/security/CVE-2025-21880 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22046 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39989 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21920 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53034 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22055 · Vendor Advisory
• https://git.kernel.org/stable/c/acf40ab42799e4ae1397ee6f5c5941092d66f999 · Patch
• https://osv.dev/vulnerability/USN-7767-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22035 · Vendor Advisory