CVE-2025-21848

In the Linux kernel, the following vulnerability has been resolved:

nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()

Add check for the return value of nfp_app_ctrl_msg_alloc() in nfp_bpf_cmsg_alloc() to prevent null pointer dereference.

This vulnerability is rated as Moderate severity because exploitation requires local access and is constrained to systems equipped with specialized Netronome Network Flow Processor (NFP) hardware. A local attacker with permissions to manipulate eBPF programs offloaded to the device could induce a null-pointer dereference during control message allocation failures, resulting in a denial of service (system crash). Confidentiality and integrity are not compromised, and systems without Netronome hardware are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.