CVE-2025-21775

Summary

CVE-2025-21775 is a vulnerability affecting the Linux kernel that has been addressed. In the `ctucanfd` subsystem, if a conversion from a socket buffer (skb) to a `struct can_frame` fails, the pointer to the `struct can_frame` remains null. This oversight is significant because this null check is missing in the only place it should be implemented, inside `ctucan_err_interrupt()`. This issue was identified using the Linux Verification Center's SVACE static analysis tool. By not properly handling the null pointer, this vulnerability could potentially result in unexpected behavior or crashes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.