CVE - CVE-2025-21773

CVE-ID
CVE-2025-21773	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: fix potential NULL pointer dereference on udev->serial The driver assumed that es58x_dev->udev->serial could never be NULL. While this is true on commercially available devices, an attacker could spoof the device identity providing a NULL USB serial number. That would trigger a NULL pointer dereference. Add a check on es58x_dev->udev->serial before accessing it.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1590667a60753ee5a54871f2840ceefd4a7831fa URL:https://git.kernel.org/stable/c/1590667a60753ee5a54871f2840ceefd4a7831fa MISC:https://git.kernel.org/stable/c/5059ea98d7bc133903d3e47ab36df6ed11d0c95f URL:https://git.kernel.org/stable/c/5059ea98d7bc133903d3e47ab36df6ed11d0c95f MISC:https://git.kernel.org/stable/c/722e8e1219c8b6ac2865011fe339315d6a8d0721 URL:https://git.kernel.org/stable/c/722e8e1219c8b6ac2865011fe339315d6a8d0721 MISC:https://git.kernel.org/stable/c/a1ad2109ce41c9e3912dadd07ad8a9c640064ffb URL:https://git.kernel.org/stable/c/a1ad2109ce41c9e3912dadd07ad8a9c640064ffb
Assigning CNA
kernel.org
Date Record Created
20241229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)