01 Record

CVE-2025-21925

llc: do not use skb_get() before dev_queue_xmit()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

llc: do not use skb_get() before dev_queue_xmit()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.22% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 13.2% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-10-15.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-04-01 15:40Z1 YR AGO
Last updated: 2026-10-15 01:05Z14 DAYS AGO
Reserved: 2024-12-29
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 4444d400f99b09c381cc8998ab1918c8d5d4c9dd46f1d818aaaba701e2027bd5

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < cd1c44327bbbd50fc24f2b38892f5f328b784d0f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 13f3f872627f0f27c31245524fc11367756240ad, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 9b6f083db141ece0024be01526aa05aa978811cb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 17f86e25431ebc15aa9245ff156414fdad47822d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 416e8b4c20c6398044e93008deefd563289f477d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 0f764208dc24ea043c3e20194d32aebf94f8459c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 056e8a46d79e22983bae4267e0d9c52927076f46, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 64e6a754d33d31aa844b3ee66fb93ac84ca1565e, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/cd1c44327bbbd50fc24f2b38892f5f328b784d0f
git.kernel.orghttps://git.kernel.org/stable/c/13f3f872627f0f27c31245524fc11367756240ad
git.kernel.orghttps://git.kernel.org/stable/c/9b6f083db141ece0024be01526aa05aa978811cb
git.kernel.orghttps://git.kernel.org/stable/c/17f86e25431ebc15aa9245ff156414fdad47822d
git.kernel.orghttps://git.kernel.org/stable/c/416e8b4c20c6398044e93008deefd563289f477d
git.kernel.orghttps://git.kernel.org/stable/c/0f764208dc24ea043c3e20194d32aebf94f8459c
git.kernel.orghttps://git.kernel.org/stable/c/056e8a46d79e22983bae4267e0d9c52927076f46
git.kernel.orghttps://git.kernel.org/stable/c/64e6a754d33d31aa844b3ee66fb93ac84ca1565e
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-457936.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.133-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.19-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.19-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.