PT-2025-8862 · Linux+6 · Linux Kernel+6
Stefan Dösinger
·
Published
2025-01-10
·
Updated
2026-05-26
·
CVE-2025-21750
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions 6.10 through 6.11
Description
A vulnerability in the Linux kernel has been identified, specifically in the brcmfmac driver. The issue arises when the
of property read string index() function returns an uninitialized value, leading to a crash. This occurs because the property does not exist, causing a random pointer to be passed to devm kstrdup(). The crash results in a page fault error with a permissions violation.Recommendations
For Linux kernel versions 6.10 through 6.11, consider applying a patch that checks the return value of
of property read string index() to prevent the crash. As a temporary workaround, disabling the brcmfmac driver may prevent the issue, but this is not a recommended long-term solution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
RCE
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu