Threats tagged 'ghsa-p5qx-8g2f-7jgh'

CVE-2025-21903 is a vulnerability in the Linux kernel's mctp i3c component where NULL header addresses were not properly handled. Specifically, the destination address (daddr) can be NULL if there is no neighbor table entry, and in such cases, the transmission packet should be dropped. The source address (saddr) is usually set by the MCTP core but requires a NULL check if packets are transmitted by other protocols. This flaw has been resolved in the Linux kernel.