Linux Kernel Firewire Test Vulnerability Affecting Multiple Linux Distributions

CVE-2025-21798

Summary

A potential null dereference vulnerability exists in the Linux kernel's firewire kunit test framework. This issue arises when the function kunit_kzalloc() returns a NULL pointer. If this NULL pointer is dereferenced without an appropriate check, it could lead to system instability or crashes. The vulnerability has been addressed by adding a NULL check for the relevant test state, enhancing the robustness of the test framework. Users are encouraged to update their Linux kernel to mitigate this risk.

References