PT-2025-8806 · Linux+6 · Linux Kernel+6

Guixin Liu

·

Published

2025-01-10

·

Updated

2026-05-26

·

CVE-2025-21723

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A potential crash in the Linux kernel has been identified. The issue occurs when setting up a bsg queue fails, causing the bsg queue to be assigned a non-NULL value. As a result, the condition to remove the queue is not met, leading to a possible kernel NULL pointer dereference. This can happen when the mpi3mr bsg exit() function is called, and the bsg remove queue() function is not executed, resulting in a crash.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

Related Identifiers

ALT-PU-2025-12647
AZL-57982
BDU:2026-02841
CVE-2025-21723
ECHO-E19E-6FF1-D1C2
OESA-2025-2120
OESA-2025-2121
OESA-2025-2122
OPENSUSE-SU-2025_1177-1
OPENSUSE-SU-2025_1178-1
OPENSUSE-SU-2025_1180-1
SUSE-SU-2025:01919-1
SUSE-SU-2025:1177-1
SUSE-SU-2025:1178-1
SUSE-SU-2025:1180-1
SUSE-SU-2025:20190-1
SUSE-SU-2025:20192-1
SUSE-SU-2025:20260-1
SUSE-SU-2025:20270-1
SUSE-SU-2025_1177-1
SUSE-SU-2025_1178-1
SUSE-SU-2025_1180-1
USN-7521-1
USN-7521-2
USN-7521-3
USN-7651-1
USN-7651-2
USN-7651-3
USN-7651-4
USN-7651-5
USN-7651-6
USN-7652-1
USN-7653-1
USN-7737-1

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu