In the Linux kernel, the following vulnerability has been resolved:
net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device
ethnlreqgetphydev() is used to lookup a phydevice, in the case an ethtool netlink command targets a specific phydev within a netdev's topology.
It takes as a parameter a const struct nlattr *header that's used for error handling :
if (!phydev) {
NL_SET_ERR_MSG_ATTR(extack, header,
"no phy matching phyindex");
return ERR_PTR(-ENODEV);
}
In the notify path after a ->set operation however, there's no request attributes available.
The typical callsite for the above function looks like:
phydev = ethnl_req_get_phydev(req_base, tb[ETHTOOL_A_XXX_HEADER],
info->extack);
So, when tb is NULL (such as in the ethnl notify path), we have a nice crash.
It turns out that there's only the PLCA command that is in that case, as the other phydev-specific commands don't have a notification.
This commit fixes the crash by passing the cmd index and the nlattr array separately, allowing NULL-checking it directly inside the helper.
[
{
"id": "CVE-2025-21921-0435f089",
"target": {
"file": "net/ethtool/stats.c",
"function": "stats_prepare_data"
},
"digest": {
"length": 1801.0,
"function_hash": "58921179879538961905957414430768548654"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-0719d4da",
"target": {
"file": "net/ethtool/plca.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"238090751665715728670568177518365639071",
"44552856578477222825169203000846918791",
"317659967138947093507643122128200375468",
"210362501761325458462431959651902940069",
"317337626082592286623479885560099682478",
"20485739360689400083622602904566815150",
"187477900156953852030379989173159265023",
"243466125349725219615829861563878292944",
"238090751665715728670568177518365639071",
"44552856578477222825169203000846918791",
"317659967138947093507643122128200375468",
"210362501761325458462431959651902940069"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-075c15d7",
"target": {
"file": "net/ethtool/plca.c",
"function": "plca_get_cfg_prepare_data"
},
"digest": {
"length": 684.0,
"function_hash": "137845752431177883570578577713737627398"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-0ffb94a5",
"target": {
"file": "net/ethtool/phy.c",
"function": "ethnl_phy_parse_request"
},
"digest": {
"length": 405.0,
"function_hash": "60079087455113929738684550776486202892"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-13753c48",
"target": {
"file": "net/ethtool/cabletest.c",
"function": "ethnl_act_cable_test_tdr"
},
"digest": {
"length": 1043.0,
"function_hash": "226275113327867027192391628048245529424"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-1564bef5",
"target": {
"file": "net/ethtool/linkstate.c",
"function": "linkstate_prepare_data"
},
"digest": {
"length": 1087.0,
"function_hash": "82265453256468625813884649649351750792"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-231c98a6",
"target": {
"file": "net/ethtool/pse-pd.c",
"function": "ethnl_set_pse"
},
"digest": {
"length": 967.0,
"function_hash": "202990293468786883444920276937645559926"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-26696695",
"target": {
"file": "net/ethtool/netlink.c",
"function": "ethnl_req_get_phydev"
},
"digest": {
"length": 378.0,
"function_hash": "80586956675591194140915032990830541076"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-28cfc16c",
"target": {
"file": "net/ethtool/phy.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"92858165573447703072569637508588003996",
"138745100084482318732272198560020404610",
"16776571792471152245870022104597437278",
"308362058912945713849968615316746556613"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-2a367d75",
"target": {
"file": "net/ethtool/strset.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"1352439987098510398929280718809908006",
"275444180421399694846142060988352871094",
"221011879778587059503795386300187355285",
"269891240787683901227978275037340134812"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-2d1a83f3",
"target": {
"file": "net/ethtool/pse-pd.c",
"function": "ethnl_set_pse"
},
"digest": {
"length": 967.0,
"function_hash": "202990293468786883444920276937645559926"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-2d814f4e",
"target": {
"file": "net/ethtool/cabletest.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"188158009649679675735375242603042910840",
"61681219357291089831157895269442216239",
"278537093250780006357399499021122124813",
"201416942387904081765223982007068179295",
"70280561209816496240051359052636329646",
"210874139815129853379543745914776625728",
"93257210824393093416206359525957850682",
"232887899764896116236495214454079479677",
"231468541232741721237307328465130208320",
"315640480061284452315173171331454457559"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-35ce711c",
"target": {
"file": "net/ethtool/plca.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"238090751665715728670568177518365639071",
"44552856578477222825169203000846918791",
"317659967138947093507643122128200375468",
"210362501761325458462431959651902940069",
"317337626082592286623479885560099682478",
"20485739360689400083622602904566815150",
"187477900156953852030379989173159265023",
"243466125349725219615829861563878292944",
"238090751665715728670568177518365639071",
"44552856578477222825169203000846918791",
"317659967138947093507643122128200375468",
"210362501761325458462431959651902940069"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-3e9e4204",
"target": {
"file": "net/ethtool/cabletest.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"188158009649679675735375242603042910840",
"61681219357291089831157895269442216239",
"278537093250780006357399499021122124813",
"201416942387904081765223982007068179295",
"70280561209816496240051359052636329646",
"210874139815129853379543745914776625728",
"93257210824393093416206359525957850682",
"232887899764896116236495214454079479677",
"231468541232741721237307328465130208320",
"315640480061284452315173171331454457559"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-4270f67c",
"target": {
"file": "net/ethtool/plca.c",
"function": "ethnl_set_plca"
},
"digest": {
"length": 963.0,
"function_hash": "109147544442507114770501759478595921212"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-464647ec",
"target": {
"file": "net/ethtool/strset.c",
"function": "strset_prepare_data"
},
"digest": {
"length": 1181.0,
"function_hash": "52301631654371211958339638756507095563"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-468f1329",
"target": {
"file": "net/ethtool/stats.c",
"function": "stats_prepare_data"
},
"digest": {
"length": 1858.0,
"function_hash": "268230771197439361362083142367686463226"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-49090982",
"target": {
"file": "net/ethtool/cabletest.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"188158009649679675735375242603042910840",
"61681219357291089831157895269442216239",
"278537093250780006357399499021122124813",
"201416942387904081765223982007068179295",
"70280561209816496240051359052636329646",
"210874139815129853379543745914776625728",
"93257210824393093416206359525957850682",
"232887899764896116236495214454079479677",
"231468541232741721237307328465130208320",
"315640480061284452315173171331454457559"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-4a403a74",
"target": {
"file": "net/ethtool/phy.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"92858165573447703072569637508588003996",
"138745100084482318732272198560020404610",
"16776571792471152245870022104597437278",
"308362058912945713849968615316746556613"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-51600d56",
"target": {
"file": "net/ethtool/strset.c",
"function": "strset_prepare_data"
},
"digest": {
"length": 1181.0,
"function_hash": "52301631654371211958339638756507095563"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-59538f5a",
"target": {
"file": "net/ethtool/plca.c",
"function": "ethnl_set_plca"
},
"digest": {
"length": 963.0,
"function_hash": "109147544442507114770501759478595921212"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-5a7bd42a",
"target": {
"file": "net/ethtool/linkstate.c",
"function": "linkstate_prepare_data"
},
"digest": {
"length": 1087.0,
"function_hash": "82265453256468625813884649649351750792"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-5bb6ad46",
"target": {
"file": "net/ethtool/stats.c",
"function": "stats_prepare_data"
},
"digest": {
"length": 1801.0,
"function_hash": "58921179879538961905957414430768548654"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-5d37857c",
"target": {
"file": "net/ethtool/cabletest.c",
"function": "ethnl_act_cable_test"
},
"digest": {
"length": 885.0,
"function_hash": "216666592697564393833336888717734862192"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-6a19e30e",
"target": {
"file": "net/ethtool/linkstate.c",
"function": "linkstate_prepare_data"
},
"digest": {
"length": 1087.0,
"function_hash": "82265453256468625813884649649351750792"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-6eab6e64",
"target": {
"file": "net/ethtool/phy.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"92858165573447703072569637508588003996",
"138745100084482318732272198560020404610",
"16776571792471152245870022104597437278",
"308362058912945713849968615316746556613"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-7217e38b",
"target": {
"file": "net/ethtool/pse-pd.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"318145104635377246446937298466313630134",
"211792931547402765951024250915864158028",
"185222315321079010827342065905906581682",
"27853960527705746484573564539593869248",
"24631503047484876781145646996700029675",
"19035387088718106422929114888160245349",
"4213027261071252938261196474775271499",
"170965348749501591024384013706326924309"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-74c20a20",
"target": {
"file": "net/ethtool/netlink.c",
"function": "ethnl_req_get_phydev"
},
"digest": {
"length": 378.0,
"function_hash": "80586956675591194140915032990830541076"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-81658eb3",
"target": {
"file": "net/ethtool/pse-pd.c",
"function": "pse_prepare_data"
},
"digest": {
"length": 462.0,
"function_hash": "231265947350339962740190778057304944311"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-82cad88b",
"target": {
"file": "net/ethtool/netlink.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"60218164699453598950097979393367819404",
"266516712291881962057903646924244776856",
"66887382316884929891576869159620541631",
"339700017351246177278355323738120782841",
"26410044499327209871219458782668995765"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-842040b8",
"target": {
"file": "net/ethtool/stats.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"176678727124440847441618629033736607037",
"269462398600806186118193104306264978288",
"18279365462565419540361498504179912720",
"99094742513328104093607035213929137982"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-85b78096",
"target": {
"file": "net/ethtool/cabletest.c",
"function": "ethnl_act_cable_test_tdr"
},
"digest": {
"length": 1043.0,
"function_hash": "226275113327867027192391628048245529424"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-8789005c",
"target": {
"file": "net/ethtool/netlink.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"108157150724300264624855842403933806637",
"28940786983540185351827185045991173463",
"314410768886814652854006247766444214050",
"63868896203128398365623896770682185959",
"280342570187459579739146168997781975862",
"145463318573831588496179780183791162518",
"234980594015540613498664854073522962266",
"32758383797699079321888350125774609499",
"38704884849425835104427598188146522326"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-8ad466c7",
"target": {
"file": "net/ethtool/cabletest.c",
"function": "ethnl_act_cable_test_tdr"
},
"digest": {
"length": 1043.0,
"function_hash": "226275113327867027192391628048245529424"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-9272789d",
"target": {
"file": "net/ethtool/plca.c",
"function": "plca_get_cfg_prepare_data"
},
"digest": {
"length": 684.0,
"function_hash": "137845752431177883570578577713737627398"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-92c1e599",
"target": {
"file": "net/ethtool/phy.c",
"function": "ethnl_phy_parse_request"
},
"digest": {
"length": 405.0,
"function_hash": "60079087455113929738684550776486202892"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-98343a28",
"target": {
"file": "net/ethtool/plca.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"238090751665715728670568177518365639071",
"44552856578477222825169203000846918791",
"317659967138947093507643122128200375468",
"210362501761325458462431959651902940069",
"317337626082592286623479885560099682478",
"20485739360689400083622602904566815150",
"187477900156953852030379989173159265023",
"243466125349725219615829861563878292944",
"238090751665715728670568177518365639071",
"44552856578477222825169203000846918791",
"317659967138947093507643122128200375468",
"210362501761325458462431959651902940069"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-9ec55c0e",
"target": {
"file": "net/ethtool/pse-pd.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"318145104635377246446937298466313630134",
"211792931547402765951024250915864158028",
"185222315321079010827342065905906581682",
"27853960527705746484573564539593869248",
"24631503047484876781145646996700029675",
"19035387088718106422929114888160245349",
"4213027261071252938261196474775271499",
"170965348749501591024384013706326924309"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-9fcec9d0",
"target": {
"file": "net/ethtool/plca.c",
"function": "ethnl_set_plca"
},
"digest": {
"length": 963.0,
"function_hash": "109147544442507114770501759478595921212"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-ac516e0b",
"target": {
"file": "net/ethtool/netlink.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"108157150724300264624855842403933806637",
"28940786983540185351827185045991173463",
"314410768886814652854006247766444214050",
"63868896203128398365623896770682185959",
"280342570187459579739146168997781975862",
"145463318573831588496179780183791162518",
"234980594015540613498664854073522962266",
"32758383797699079321888350125774609499",
"38704884849425835104427598188146522326"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-bd9428f4",
"target": {
"file": "net/ethtool/stats.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"176678727124440847441618629033736607037",
"269462398600806186118193104306264978288",
"18279365462565419540361498504179912720",
"99094742513328104093607035213929137982"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-be927786",
"target": {
"file": "net/ethtool/linkstate.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"313230164395406225384535286279911045743",
"305258745144502432671159211048622119592",
"72541554063749720475931130107034157918",
"155742096720600622777151011487586114312"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-c1843020",
"target": {
"file": "net/ethtool/netlink.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"60218164699453598950097979393367819404",
"266516712291881962057903646924244776856",
"66887382316884929891576869159620541631",
"339700017351246177278355323738120782841",
"26410044499327209871219458782668995765"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-c4cc9204",
"target": {
"file": "net/ethtool/pse-pd.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"318145104635377246446937298466313630134",
"211792931547402765951024250915864158028",
"185222315321079010827342065905906581682",
"27853960527705746484573564539593869248",
"24631503047484876781145646996700029675",
"19035387088718106422929114888160245349",
"4213027261071252938261196474775271499",
"170965348749501591024384013706326924309"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-c5dafe0f",
"target": {
"file": "net/ethtool/cabletest.c",
"function": "ethnl_act_cable_test"
},
"digest": {
"length": 885.0,
"function_hash": "216666592697564393833336888717734862192"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-c708d5c2",
"target": {
"file": "net/ethtool/netlink.c",
"function": "ethnl_req_get_phydev"
},
"digest": {
"length": 378.0,
"function_hash": "80586956675591194140915032990830541076"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-c792dffc",
"target": {
"file": "net/ethtool/linkstate.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"313230164395406225384535286279911045743",
"305258745144502432671159211048622119592",
"72541554063749720475931130107034157918",
"155742096720600622777151011487586114312"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-cb6932f3",
"target": {
"file": "net/ethtool/strset.c",
"function": "strset_prepare_data"
},
"digest": {
"length": 1181.0,
"function_hash": "52301631654371211958339638756507095563"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-cb94861b",
"target": {
"file": "net/ethtool/plca.c",
"function": "plca_get_status_prepare_data"
},
"digest": {
"length": 687.0,
"function_hash": "298406068839594453461444770980037527282"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-cce4fea0",
"target": {
"file": "net/ethtool/netlink.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"108157150724300264624855842403933806637",
"28940786983540185351827185045991173463",
"314410768886814652854006247766444214050",
"63868896203128398365623896770682185959",
"280342570187459579739146168997781975862",
"145463318573831588496179780183791162518",
"234980594015540613498664854073522962266",
"32758383797699079321888350125774609499",
"38704884849425835104427598188146522326"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-cea17c20",
"target": {
"file": "net/ethtool/strset.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"1352439987098510398929280718809908006",
"275444180421399694846142060988352871094",
"221011879778587059503795386300187355285",
"269891240787683901227978275037340134812"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-d2da21df",
"target": {
"file": "net/ethtool/phy.c",
"function": "ethnl_phy_parse_request"
},
"digest": {
"length": 405.0,
"function_hash": "60079087455113929738684550776486202892"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-d3b0ebfc",
"target": {
"file": "net/ethtool/netlink.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"60218164699453598950097979393367819404",
"266516712291881962057903646924244776856",
"66887382316884929891576869159620541631",
"339700017351246177278355323738120782841",
"26410044499327209871219458782668995765"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-da8bca81",
"target": {
"file": "net/ethtool/strset.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"1352439987098510398929280718809908006",
"275444180421399694846142060988352871094",
"221011879778587059503795386300187355285",
"269891240787683901227978275037340134812"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-dbf69762",
"target": {
"file": "net/ethtool/linkstate.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"313230164395406225384535286279911045743",
"305258745144502432671159211048622119592",
"72541554063749720475931130107034157918",
"155742096720600622777151011487586114312"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-dd251a75",
"target": {
"file": "net/ethtool/pse-pd.c",
"function": "ethnl_set_pse"
},
"digest": {
"length": 967.0,
"function_hash": "202990293468786883444920276937645559926"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-e2716c3e",
"target": {
"file": "net/ethtool/pse-pd.c",
"function": "pse_prepare_data"
},
"digest": {
"length": 462.0,
"function_hash": "231265947350339962740190778057304944311"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-e5a5104a",
"target": {
"file": "net/ethtool/pse-pd.c",
"function": "pse_prepare_data"
},
"digest": {
"length": 462.0,
"function_hash": "231265947350339962740190778057304944311"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-e9d8a528",
"target": {
"file": "net/ethtool/plca.c",
"function": "plca_get_status_prepare_data"
},
"digest": {
"length": 687.0,
"function_hash": "298406068839594453461444770980037527282"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-ea7ef7ec",
"target": {
"file": "net/ethtool/stats.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"176678727124440847441618629033736607037",
"269462398600806186118193104306264978288",
"18279365462565419540361498504179912720",
"99094742513328104093607035213929137982"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-ed0c51fb",
"target": {
"file": "net/ethtool/cabletest.c",
"function": "ethnl_act_cable_test"
},
"digest": {
"length": 885.0,
"function_hash": "216666592697564393833336888717734862192"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-f1320da3",
"target": {
"file": "net/ethtool/plca.c",
"function": "plca_get_cfg_prepare_data"
},
"digest": {
"length": 684.0,
"function_hash": "137845752431177883570578577713737627398"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
},
{
"id": "CVE-2025-21921-f2c98c31",
"target": {
"file": "net/ethtool/plca.c",
"function": "plca_get_status_prepare_data"
},
"digest": {
"length": 687.0,
"function_hash": "298406068839594453461444770980037527282"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
"signature_version": "v1"
}
]