Description
In the Linux kernel, the following vulnerability has been resolved:
sched: address a potential NULL pointer dereference in the GRED scheduler.
If kzalloc in gred_init returns a NULL pointer, the code follows the
error handling path, invoking gred_destroy. This, in turn, calls
gred_offload, where memset could receive a NULL pointer as input,
potentially leading to a kernel crash.
When table->opt is NULL in gred_init(), gred_change_table_def()
is not called yet, so it is not necessary to call ->ndo_setup_tc()
in gred_offload().
sched: address a potential NULL pointer dereference in the GRED scheduler.
If kzalloc in gred_init returns a NULL pointer, the code follows the
error handling path, invoking gred_destroy. This, in turn, calls
gred_offload, where memset could receive a NULL pointer as input,
potentially leading to a kernel crash.
When table->opt is NULL in gred_init(), gred_change_table_def()
is not called yet, so it is not necessary to call ->ndo_setup_tc()
in gred_offload().
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux | unaffected |
|
||||||||||||||||||||||||
| Linux | Linux | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-4193-1 | linux-6.1 security update |
 Debian DSA |
DSA-5900-1 | linux security update |
 EUVD |
EUVD-2025-9340 | In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. This, in turn, calls gred_offload, where memset could receive a NULL pointer as input, potentially leading to a kernel crash. When table->opt is NULL in gred_init(), gred_change_table_def() is not called yet, so it is not necessary to call ->ndo_setup_tc() in gred_offload(). |
 Ubuntu USN |
USN-7605-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7605-2 | Linux kernel (Low Latency) vulnerabilities |
| Ubuntu USN |
USN-7606-1 | Linux kernel (OEM) vulnerabilities |
| Ubuntu USN |
USN-7628-1 | Linux kernel (Azure) vulnerabilities |
| Ubuntu USN |
USN-7764-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7764-2 | Linux kernel (HWE) vulnerabilities |
| Ubuntu USN |
USN-7765-1 | Linux kernel (NVIDIA) vulnerabilities |
| Ubuntu USN |
USN-7766-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7767-1 | Linux kernel (Real-time) vulnerabilities |
| Ubuntu USN |
USN-7767-2 | Linux kernel (Real-time) vulnerabilities |
| Ubuntu USN |
USN-7779-1 | Linux kernel (IBM) vulnerabilities |
| Ubuntu USN |
USN-7790-1 | Linux kernel (Raspberry Pi) vulnerabilities |
| Ubuntu USN |
USN-7800-1 | Linux kernel (Raspberry Pi Real-time) vulnerabilities |
| Ubuntu USN |
USN-7801-1 | Linux kernel (HWE) vulnerabilities |
| Ubuntu USN |
USN-7802-1 | Linux kernel (Azure) vulnerabilities |
| Ubuntu USN |
USN-7801-2 | Linux kernel (Oracle) vulnerabilities |
| Ubuntu USN |
USN-7809-1 | Linux kernel (Azure, N-Series) vulnerabilities |
| Ubuntu USN |
USN-7801-3 | Linux kernel (Oracle) vulnerabilities |
References
History
Wed, 13 May 2026 07:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Mon, 03 Nov 2025 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mon, 21 Apr 2025 02:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
threat_severity
|
threat_severity
|
Thu, 10 Apr 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Linux
Linux linux Kernel |
|
| Weaknesses | CWE-476 | |
| CPEs | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:* |
|
| Vendors & Products |
Linux
Linux linux Kernel |
Wed, 02 Apr 2025 14:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Tue, 01 Apr 2025 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. This, in turn, calls gred_offload, where memset could receive a NULL pointer as input, potentially leading to a kernel crash. When table->opt is NULL in gred_init(), gred_change_table_def() is not called yet, so it is not necessary to call ->ndo_setup_tc() in gred_offload(). | |
| Title | sched: address a potential NULL pointer dereference in the GRED scheduler. | |
| References |
|
|
MITRE
Status: PUBLISHED
Assigner: Linux
Published:
Updated: 2026-05-11T21:10:18.630Z
Reserved: 2024-12-29T08:45:45.799Z
Link: CVE-2025-21980
Vulnrichment
Updated: 2025-11-03T19:40:21.123Z
NVD
Status : Modified
Published: 2025-04-01T16:15:29.390
Modified: 2025-11-03T20:17:34.367
Link: CVE-2025-21980
Redhat
OpenCVE Enrichment
No data.
Weaknesses