CVE - CVE-2025-22050

CVE-ID
CVE-2025-22050	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rx_complete Missing usbnet_going_away Check in Critical Path. The usb_submit_urb function lacks a usbnet_going_away validation, whereas __usbnet_queue_skb includes this check. This inconsistency creates a race condition where: A URB request may succeed, but the corresponding SKB data fails to be queued. Subsequent processes: (e.g., rx_complete → defer_bh → __skb_unlink(skb, list)) attempt to access skb->next, triggering a NULL pointer dereference (Kernel Panic).
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0c30988588b28393e3e8873d5654f910e86391ba URL:https://git.kernel.org/stable/c/0c30988588b28393e3e8873d5654f910e86391ba MISC:https://git.kernel.org/stable/c/0f10f83acfd619e13c64d6705908dfd792f19544 URL:https://git.kernel.org/stable/c/0f10f83acfd619e13c64d6705908dfd792f19544 MISC:https://git.kernel.org/stable/c/51de3600093429e3b712e5f091d767babc5dd6df URL:https://git.kernel.org/stable/c/51de3600093429e3b712e5f091d767babc5dd6df MISC:https://git.kernel.org/stable/c/95789c2f94fd29dce8759f9766baa333f749287c URL:https://git.kernel.org/stable/c/95789c2f94fd29dce8759f9766baa333f749287c MISC:https://git.kernel.org/stable/c/acacd48a37b52fc95f621765762c04152b58d642 URL:https://git.kernel.org/stable/c/acacd48a37b52fc95f621765762c04152b58d642 MISC:https://git.kernel.org/stable/c/d689645cd1594ea1d13cb0c404f8ad1011353e0e URL:https://git.kernel.org/stable/c/d689645cd1594ea1d13cb0c404f8ad1011353e0e MISC:https://git.kernel.org/stable/c/fd9ee3f0d6a53844f65efde581c91bbb0ff749ac URL:https://git.kernel.org/stable/c/fd9ee3f0d6a53844f65efde581c91bbb0ff749ac
Assigning CNA
kernel.org
Date Record Created
20241229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)