Linux Kernel Vulnerability in Panthor Driver
CVE-2025-21843

5.5MEDIUM

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
7 March 2025

What is CVE-2025-21843?

In the Linux kernel, a vulnerability exists within the Panthor driver that relates to uninitialized values being used when calling the PANTHOR_UOBJ_SET() function. Specifically, the 'priorities_info' variable is left uninitialized, which can lead to garbage values being copied into user objects. This flaw can undermine the stability and security of applications relying on this driver. To mitigate this issue, initializing 'priorities_info' using memset ensures that no uninitialized data is passed, thus enhancing the security and reliability of the user interaction with the kernel.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Linux f70000ef23527f6d928d1175c66c5fafa968814b < 64b95bbc08bacf3e4b05c8604e6a4fec43bb712a

Linux f70000ef23527f6d928d1175c66c5fafa968814b < 3b32b7f638fe61e9d29290960172f4e360e38233

Linux 6.13

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.