CVE-2025-21713

Summary

CVE-2025-21713 is a vulnerability affecting the Linux kernel on pSeries systems. In specific scenarios, when attempting to use the same vfio container for different iommu groups, the spapr_tce_set_window() function returns an error and triggers a crash. The error arises due to an incorrect null check in spapr_tce_unset_window(), leading the kernel to access an uninitialized memory location. This issue can result in a kernel NULL pointer dereference, potentially exploited by attackers. The vulnerability has been mitigated by implementing a proper null check in spapr_tce_unset_window().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.