Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rio_add_net() in rio_scan_alloc_net() The return value of rio_add_net() should be checked. If it fails, put_device() should be called to free the memory and give up the reference initialized in rio_add_net().
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.6, < 5.4.291 |
References
- https://git.kernel.org/stable/c/181d4daaefb3bceeb2f2635ba9f3781eeda9e550Patch
- https://git.kernel.org/stable/c/4f3509cfcc02e9d757f2714bb7dbbeec35de6fa7Patch
- https://git.kernel.org/stable/c/6d22953c4a183d0b7fdf34d68c5debd16da6edc5Patch
- https://git.kernel.org/stable/c/a0d069ccc475abaaa79c6368ee27fc0b5912bea8Patch
- https://git.kernel.org/stable/c/ad82be4298a89a9ae46f07128bdf3d8614bce745Patch
- https://git.kernel.org/stable/c/c332f3e2df0fcae5a45fd55cc18902fb1e4825caPatch
- https://git.kernel.org/stable/c/e6411c3b9512dba09af7d014d474516828c89706Patch
- https://git.kernel.org/stable/c/e842f9a1edf306bf36fe2a4d847a0b0d458770dePatch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
FAQ
What is CVE-2025-21935?
CVE-2025-21935 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rio_add_net() in rio_scan_alloc_net() The return value of rio_add_net() should be checked. If it fails, pu...
How severe is CVE-2025-21935?
CVE-2025-21935 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-21935?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.