CVE-2025-21933 — NULL Pointer Dereference in Linux

CWE-476 — NULL Pointer Dereference6 documents6 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 77.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedApr 1

Description

In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When update_mmu_cache_range() is called by update_mmu_cache(), the vmf parameter is NULL, which will cause a NULL pointer dereference issue in adjust_pte(): Unable to handle kernel NULL pointer dereference at virtual address 00000030 when read Hardware name: Atmel AT91SAM9 PC is at update_mmu_cache_range+0x1e0/0x278 LR is at pte_offset_map_rw_nolock+0x18/0x2c Call trace: update…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDlinux/linux_kernel6.13 — 6.13.7+1
▶CVEListV5linux/linuxfc9c45b71f43cafcc0435dd4c7a2d3b99955a0fa — 91d011efe30aedde067ce6d218d521cf99b162e5+2
▶debiandebian/linux

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2025-21933: In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When update_mmu_cache_range() is↗2025-04-01
▶
GHSA
GHSA-q5wj-cxq5-m47h: In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When update_mmu_cache_range() i↗2025-04-01
▶

📋Vendor Advisories

2
Red Hat
kernel: arm: pgtable: fix NULL pointer dereference issue↗2025-04-01
▶
Debian
CVE-2025-21933: linux - In the Linux kernel, the following vulnerability has been resolved: arm: pgtabl...↗2025
▶
CVE-2025-21933 — NULL Pointer Dereference in Linux | cvebase