cbcvebase.
CVE-2025-21935
published 2025-04-01

CVE-2025-21935: In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rio_add_net() in rio_scan_alloc_net() The return value of…

PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.21%
10.7th percentile
In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rio_add_net() in rio_scan_alloc_net() The return value of rio_add_net() should be checked. If it fails, put_device() should be called to free the memory and give up the reference initialized in rio_add_net().

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.133-1 (bookworm)linux 6.1.133-1 (bookworm)
debianlinux-6.1< linux 6.1.133-1 (bookworm)linux 6.1.133-1 (bookworm)
linuxlinux
linuxlinux>= e6b585ca6e81badeb3d42db3cc408174f2826034 < 6d22953c4a183d0b7fdf34d68c5debd16da6edc56d22953c4a183d0b7fdf34d68c5debd16da6edc5
linuxlinux>= e6b585ca6e81badeb3d42db3cc408174f2826034 < 4f3509cfcc02e9d757f2714bb7dbbeec35de6fa74f3509cfcc02e9d757f2714bb7dbbeec35de6fa7
linuxlinux>= e6b585ca6e81badeb3d42db3cc408174f2826034 < 181d4daaefb3bceeb2f2635ba9f3781eeda9e550181d4daaefb3bceeb2f2635ba9f3781eeda9e550
linuxlinux>= e6b585ca6e81badeb3d42db3cc408174f2826034 < ad82be4298a89a9ae46f07128bdf3d8614bce745ad82be4298a89a9ae46f07128bdf3d8614bce745
linuxlinux>= e6b585ca6e81badeb3d42db3cc408174f2826034 < e6411c3b9512dba09af7d014d474516828c89706e6411c3b9512dba09af7d014d474516828c89706
linuxlinux>= e6b585ca6e81badeb3d42db3cc408174f2826034 < c332f3e2df0fcae5a45fd55cc18902fb1e4825cac332f3e2df0fcae5a45fd55cc18902fb1e4825ca
linuxlinux>= e6b585ca6e81badeb3d42db3cc408174f2826034 < a0d069ccc475abaaa79c6368ee27fc0b5912bea8a0d069ccc475abaaa79c6368ee27fc0b5912bea8
linuxlinux>= e6b585ca6e81badeb3d42db3cc408174f2826034 < e842f9a1edf306bf36fe2a4d847a0b0d458770dee842f9a1edf306bf36fe2a4d847a0b0d458770de
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.237-15.10.237-1
linuxlinux_kernel>= 0 < 6.1.133-16.1.133-1
linuxlinux_kernel>= 0 < 6.12.19-16.12.19-1
linuxlinux_kernel>= 0 < 6.12.19-16.12.19-1
linuxlinux_kernel>= 0 < 5.4.0-216.2365.4.0-216.236
linuxlinux_kernel>= 0 < 5.15.0-140.1505.15.0-140.150
linuxlinux_kernel>= 0 < 6.8.0-84.846.8.0-84.84
linuxlinux_kernel>= 4.6 < 5.4.2915.4.291
linuxlinux_kernel>= 5.11 < 5.15.1795.15.179
linuxlinux_kernel>= 5.16 < 6.1.1316.1.131
linuxlinux_kernel>= 5.5 < 5.10.2355.10.235
linuxlinux_kernel>= 6.13 < 6.13.76.13.7
linuxlinux_kernel>= 6.2 < 6.6.836.6.83

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.