Threats tagged 'ghsa-mwfv-f593-4f6x'

CVE-2025-21980 is a medium-severity vulnerability in the Linux kernel's GRED scheduler where a potential NULL pointer dereference can occur. This happens if the memory allocation function kzalloc returns NULL during gred_init, leading to a call to memset with a NULL pointer, which can cause a kernel crash. The issue arises because error handling invokes gred_destroy, which calls gred_offload, and memset is called without verifying the pointer. The vulnerability does not affect confidentiality or integrity but impacts availability by causing a denial of service via kernel crash.