PT-2025-8989 · Linux+3 · Linux Kernel+3

Charles Han · Published 2025-01-10 · Updated 2026-04-20 · CVE-2025-21798

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential null dereference issue has been identified in the firewire kunit test of the Linux kernel. The kunit kzalloc() function may return a NULL pointer, and without a proper NULL check, dereferencing it could lead to a null dereference. This issue is resolved by adding a NULL check for test state.

Recommendations For the affected Linux kernel version, add a NULL check for test state to prevent potential null dereference.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-12194

CVE-2025-21798

USN-7521-1

USN-7521-2

USN-7521-3

USN-7651-1

USN-7651-2

USN-7651-3

USN-7651-4

USN-7651-5

USN-7651-6

USN-7652-1

USN-7653-1

USN-7737-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 324

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21798.json · Exploit
• https://ubuntu.com/security/CVE-2025-21792 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21689 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57997 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21674 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21766 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58076 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58011 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21666 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7651-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21859 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7651-6 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21727 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21744 · Vendor Advisory