CVE-2025-22050
usbnet:fix NPE during rx_complete
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rx_complete Missing usbnet_going_away Check in Critical Path.
The usb_submit_urb function lacks a usbnet_going_away
validation, whereas __usbnet_queue_skb includes this check. This inconsistency creates a race condition where:
A URB request may succeed, but the corresponding SKB data
fails to be queued. Subsequent processes:
(e.g., rx_complete → defer_bh → __skb_unlink(skb, list))
attempt to access skb->next, triggering a NULL pointer
dereference (Kernel Panic).
In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rx_complete Missing usbnet_going_away Check in Critical Path. The usb_submit_urb function lacks a usbnet_going_away validation, whereas __usbnet_queue_skb includes this check. This inconsistency creates a race condition where: A URB request may succeed, but the corresponding SKB data fails to be queued. Subsequent processes: (e.g., rx_complete → defer_bh → __skb_unlink(skb, list)) attempt to access skb->next, triggering a NULL pointer dereference (Kernel Panic).
CVSS Scores
SSVC
- Decision:-
Timeline
- 2024-12-29 CVE Reserved
- 2025-04-16 CVE Published
- 2025-04-16 CVE Updated
- 2025-04-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| https://git.kernel.org/stable/c/b80aacfea6e8d6ed6e430aa13922d6ccf044415a | Vuln. Introduced | |
| https://git.kernel.org/stable/c/869caa8de8cb94514df704ccbe0b024fda4b9398 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/1e44ee6cdd123d6cfe78b4a94e1572e23bbb58ce | Vuln. Introduced | |
| https://git.kernel.org/stable/c/04e906839a053f092ef53f4fb2d610983412b904 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/ca124236cd14e61610f56df9a8f81376a1ffe660 | Vuln. Introduced | |
| https://git.kernel.org/stable/c/54671d731f4977fb3c0c26f2840655b5204e4437 | Vuln. Introduced |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 5.15.168 < 5.15.180 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.15.168 < 5.15.180" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.1.113 < 6.1.134 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.1.113 < 6.1.134" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.6.54 < 6.6.87 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.6.54 < 6.6.87" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.12 < 6.12.23 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.12 < 6.12.23" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.12 < 6.13.11 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.12 < 6.13.11" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.12 < 6.14.2 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.12 < 6.14.2" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 6.12 < 6.15-rc1 Search vendor "Linux" for product "Linux Kernel" and version " >= 6.12 < 6.15-rc1" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 6.10.13 Search vendor "Linux" for product "Linux Kernel" and version "6.10.13" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | 6.11.2 Search vendor "Linux" for product "Linux Kernel" and version "6.11.2" | en |
Affected
| ||||||