---
id: CVE-2025-21848
title: 'nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()

  Add check for the return value of nfp_app_ctrl_msg_alloc() in
  nfp_bpf_cmsg_alloc() to prevent null pointer dereference.
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: adp
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c <
    d64c6ca420019712e194fe095b55f87363e22a9a
  - >-
    Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c <
    e976ea6c5e1b005c64467cbf94a8577aae9c7d81
  - >-
    Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c <
    924b239f9704566e0d86abd894d2d64bd73c11eb
  - >-
    Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c <
    1358d8e07afdf21d49ca6f00c56048442977e00a
  - >-
    Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c <
    29ccb1e4040da6ff02b7e64efaa2f8e6bf06020d
  - >-
    Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c <
    897c32cd763fd11d0b6ed024c52f44d2475bb820
  - >-
    Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c <
    bd97f60750bb581f07051f98e31dfda59d3a783b
  - >-
    Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c <
    878e7b11736e062514e58f3b445ff343e6705537
  - Linux 4.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-10-01T19:26:25.004433Z'
published: '2025-03-12'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:04:45.393Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-21848'
references:
  - url: 'https://git.kernel.org/stable/c/d64c6ca420019712e194fe095b55f87363e22a9a'
  - url: 'https://git.kernel.org/stable/c/e976ea6c5e1b005c64467cbf94a8577aae9c7d81'
  - url: 'https://git.kernel.org/stable/c/924b239f9704566e0d86abd894d2d64bd73c11eb'
  - url: 'https://git.kernel.org/stable/c/1358d8e07afdf21d49ca6f00c56048442977e00a'
  - url: 'https://git.kernel.org/stable/c/29ccb1e4040da6ff02b7e64efaa2f8e6bf06020d'
  - url: 'https://git.kernel.org/stable/c/897c32cd763fd11d0b6ed024c52f44d2475bb820'
  - url: 'https://git.kernel.org/stable/c/bd97f60750bb581f07051f98e31dfda59d3a783b'
  - url: 'https://git.kernel.org/stable/c/878e7b11736e062514e58f3b445ff343e6705537'
tags:
  - cve.org
epss: 0.00254
epssPercentile: 0.1685
ingestedAt: '2026-10-15T05:52:46.107Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()

Add check for the return value of nfp_app_ctrl_msg_alloc() in
nfp_bpf_cmsg_alloc() to prevent null pointer dereference.

## Affected

- `Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c < d64c6ca420019712e194fe095b55f87363e22a9a`
- `Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c < e976ea6c5e1b005c64467cbf94a8577aae9c7d81`
- `Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c < 924b239f9704566e0d86abd894d2d64bd73c11eb`
- `Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c < 1358d8e07afdf21d49ca6f00c56048442977e00a`
- `Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c < 29ccb1e4040da6ff02b7e64efaa2f8e6bf06020d`
- `Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c < 897c32cd763fd11d0b6ed024c52f44d2475bb820`
- `Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c < bd97f60750bb581f07051f98e31dfda59d3a783b`
- `Linux >= ff3d43f7568c82b335d7df2d40a31447c3fce10c < 878e7b11736e062514e58f3b445ff343e6705537`
- `Linux 4.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.