CVE-2025-21903
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/04/2025
Last modified:
01/04/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mctp i3c: handle NULL header address<br />
<br />
daddr can be NULL if there is no neighbour table entry present,<br />
in that case the tx packet should be dropped.<br />
<br />
saddr will usually be set by MCTP core, but check for NULL in case a<br />
packet is transmitted by a different protocol.