CVE-2025-22050(linux / linux_kernel)
LOWCVSS 4.7 · MEDIUMImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rx_complete Missing usbnet_going_away Check in Critical Path. The usb_submit_urb function lacks a usbnet_going_away validation, whereas __usbnet_queue_skb includes this check. This inconsistency creates a race condition where: A URB request may succeed, but the corresponding SKB data fails to be queued. Subsequent processes: (e.g., rx_complete → defer_bh → __skb_unlink(skb, list)) attempt to access skb->next, triggering a NULL pointer dereference (Kernel Panic).
Sources & remediation
- https://git.kernel.org/stable/c/0c30988588b28393e3e8873d5654f910e86391ba
- https://git.kernel.org/stable/c/0f10f83acfd619e13c64d6705908dfd792f19544
- https://git.kernel.org/stable/c/51de3600093429e3b712e5f091d767babc5dd6df
- https://git.kernel.org/stable/c/95789c2f94fd29dce8759f9766baa333f749287c
- https://git.kernel.org/stable/c/acacd48a37b52fc95f621765762c04152b58d642
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- linux_kernel
Affected systems
Deep dive
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |