CVE-2025-21980
sched: address a potential NULL pointer dereference in the GRED scheduler.
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
sched: address a potential NULL pointer dereference in the GRED scheduler.
In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. This, in turn, calls gred_offload, where memset could receive a NULL pointer as input, potentially leading to a kernel crash. When table->opt is NULL in gred_init(), gred_change_table_def() is not called yet, so it is not necessary to call ->ndo_setup_tc() in gred_offload().
Reserved 2024-12-29 | Published 2025-04-01 | Updated 2025-05-04 | Assigner Linuxgit.kernel.org/...c/d02c9acd68950a444acda18d514e2b41f846cb7f
git.kernel.org/...c/0f0a152957d64ce45b4c27c687e7d087e8f45079
git.kernel.org/...c/68896dd50180b38ea552e49a6a00b685321e5769
git.kernel.org/...c/5f996b4f80c2cef1f9c77275055e7fcba44c9199
git.kernel.org/...c/115ef44a98220fddfab37a39a19370497cd718b9
Support options
