CVE-2025-21921

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-21921
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21921.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-21921
Downstream
Published
2025-04-01T15:40:55.110Z
Modified
2025-11-20T08:14:14.259108Z
Summary
net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device
Details

In the Linux kernel, the following vulnerability has been resolved:

net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device

ethnlreqgetphydev() is used to lookup a phydevice, in the case an ethtool netlink command targets a specific phydev within a netdev's topology.

It takes as a parameter a const struct nlattr *header that's used for error handling :

   if (!phydev) {
           NL_SET_ERR_MSG_ATTR(extack, header,
                               "no phy matching phyindex");
           return ERR_PTR(-ENODEV);
   }

In the notify path after a ->set operation however, there's no request attributes available.

The typical callsite for the above function looks like:

phydev = ethnl_req_get_phydev(req_base, tb[ETHTOOL_A_XXX_HEADER],
                  info->extack);

So, when tb is NULL (such as in the ethnl notify path), we have a nice crash.

It turns out that there's only the PLCA command that is in that case, as the other phydev-specific commands don't have a notification.

This commit fixes the crash by passing the cmd index and the nlattr array separately, allowing NULL-checking it directly inside the helper.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c15e065b46dc4e19837275b826c1960d55564abd
Fixed
639c70352958735addbba5ae7dd65985da96e061
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c15e065b46dc4e19837275b826c1960d55564abd
Fixed
1f458fa42c29144cef280e05bc49fc21b873d897
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c15e065b46dc4e19837275b826c1960d55564abd
Fixed
637399bf7e77797811adf340090b561a8f9d1213

Affected versions

v6.*

v6.11
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.2
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.13.1
v6.13.2
v6.13.3
v6.13.4
v6.13.5
v6.13.6
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4

Database specific

vanir_signatures

[
    {
        "id": "CVE-2025-21921-0435f089",
        "target": {
            "file": "net/ethtool/stats.c",
            "function": "stats_prepare_data"
        },
        "digest": {
            "length": 1801.0,
            "function_hash": "58921179879538961905957414430768548654"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-0719d4da",
        "target": {
            "file": "net/ethtool/plca.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "238090751665715728670568177518365639071",
                "44552856578477222825169203000846918791",
                "317659967138947093507643122128200375468",
                "210362501761325458462431959651902940069",
                "317337626082592286623479885560099682478",
                "20485739360689400083622602904566815150",
                "187477900156953852030379989173159265023",
                "243466125349725219615829861563878292944",
                "238090751665715728670568177518365639071",
                "44552856578477222825169203000846918791",
                "317659967138947093507643122128200375468",
                "210362501761325458462431959651902940069"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-075c15d7",
        "target": {
            "file": "net/ethtool/plca.c",
            "function": "plca_get_cfg_prepare_data"
        },
        "digest": {
            "length": 684.0,
            "function_hash": "137845752431177883570578577713737627398"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-0ffb94a5",
        "target": {
            "file": "net/ethtool/phy.c",
            "function": "ethnl_phy_parse_request"
        },
        "digest": {
            "length": 405.0,
            "function_hash": "60079087455113929738684550776486202892"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-13753c48",
        "target": {
            "file": "net/ethtool/cabletest.c",
            "function": "ethnl_act_cable_test_tdr"
        },
        "digest": {
            "length": 1043.0,
            "function_hash": "226275113327867027192391628048245529424"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-1564bef5",
        "target": {
            "file": "net/ethtool/linkstate.c",
            "function": "linkstate_prepare_data"
        },
        "digest": {
            "length": 1087.0,
            "function_hash": "82265453256468625813884649649351750792"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-231c98a6",
        "target": {
            "file": "net/ethtool/pse-pd.c",
            "function": "ethnl_set_pse"
        },
        "digest": {
            "length": 967.0,
            "function_hash": "202990293468786883444920276937645559926"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-26696695",
        "target": {
            "file": "net/ethtool/netlink.c",
            "function": "ethnl_req_get_phydev"
        },
        "digest": {
            "length": 378.0,
            "function_hash": "80586956675591194140915032990830541076"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-28cfc16c",
        "target": {
            "file": "net/ethtool/phy.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "92858165573447703072569637508588003996",
                "138745100084482318732272198560020404610",
                "16776571792471152245870022104597437278",
                "308362058912945713849968615316746556613"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-2a367d75",
        "target": {
            "file": "net/ethtool/strset.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "1352439987098510398929280718809908006",
                "275444180421399694846142060988352871094",
                "221011879778587059503795386300187355285",
                "269891240787683901227978275037340134812"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-2d1a83f3",
        "target": {
            "file": "net/ethtool/pse-pd.c",
            "function": "ethnl_set_pse"
        },
        "digest": {
            "length": 967.0,
            "function_hash": "202990293468786883444920276937645559926"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-2d814f4e",
        "target": {
            "file": "net/ethtool/cabletest.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "188158009649679675735375242603042910840",
                "61681219357291089831157895269442216239",
                "278537093250780006357399499021122124813",
                "201416942387904081765223982007068179295",
                "70280561209816496240051359052636329646",
                "210874139815129853379543745914776625728",
                "93257210824393093416206359525957850682",
                "232887899764896116236495214454079479677",
                "231468541232741721237307328465130208320",
                "315640480061284452315173171331454457559"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-35ce711c",
        "target": {
            "file": "net/ethtool/plca.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "238090751665715728670568177518365639071",
                "44552856578477222825169203000846918791",
                "317659967138947093507643122128200375468",
                "210362501761325458462431959651902940069",
                "317337626082592286623479885560099682478",
                "20485739360689400083622602904566815150",
                "187477900156953852030379989173159265023",
                "243466125349725219615829861563878292944",
                "238090751665715728670568177518365639071",
                "44552856578477222825169203000846918791",
                "317659967138947093507643122128200375468",
                "210362501761325458462431959651902940069"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-3e9e4204",
        "target": {
            "file": "net/ethtool/cabletest.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "188158009649679675735375242603042910840",
                "61681219357291089831157895269442216239",
                "278537093250780006357399499021122124813",
                "201416942387904081765223982007068179295",
                "70280561209816496240051359052636329646",
                "210874139815129853379543745914776625728",
                "93257210824393093416206359525957850682",
                "232887899764896116236495214454079479677",
                "231468541232741721237307328465130208320",
                "315640480061284452315173171331454457559"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-4270f67c",
        "target": {
            "file": "net/ethtool/plca.c",
            "function": "ethnl_set_plca"
        },
        "digest": {
            "length": 963.0,
            "function_hash": "109147544442507114770501759478595921212"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-464647ec",
        "target": {
            "file": "net/ethtool/strset.c",
            "function": "strset_prepare_data"
        },
        "digest": {
            "length": 1181.0,
            "function_hash": "52301631654371211958339638756507095563"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-468f1329",
        "target": {
            "file": "net/ethtool/stats.c",
            "function": "stats_prepare_data"
        },
        "digest": {
            "length": 1858.0,
            "function_hash": "268230771197439361362083142367686463226"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-49090982",
        "target": {
            "file": "net/ethtool/cabletest.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "188158009649679675735375242603042910840",
                "61681219357291089831157895269442216239",
                "278537093250780006357399499021122124813",
                "201416942387904081765223982007068179295",
                "70280561209816496240051359052636329646",
                "210874139815129853379543745914776625728",
                "93257210824393093416206359525957850682",
                "232887899764896116236495214454079479677",
                "231468541232741721237307328465130208320",
                "315640480061284452315173171331454457559"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-4a403a74",
        "target": {
            "file": "net/ethtool/phy.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "92858165573447703072569637508588003996",
                "138745100084482318732272198560020404610",
                "16776571792471152245870022104597437278",
                "308362058912945713849968615316746556613"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-51600d56",
        "target": {
            "file": "net/ethtool/strset.c",
            "function": "strset_prepare_data"
        },
        "digest": {
            "length": 1181.0,
            "function_hash": "52301631654371211958339638756507095563"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-59538f5a",
        "target": {
            "file": "net/ethtool/plca.c",
            "function": "ethnl_set_plca"
        },
        "digest": {
            "length": 963.0,
            "function_hash": "109147544442507114770501759478595921212"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-5a7bd42a",
        "target": {
            "file": "net/ethtool/linkstate.c",
            "function": "linkstate_prepare_data"
        },
        "digest": {
            "length": 1087.0,
            "function_hash": "82265453256468625813884649649351750792"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-5bb6ad46",
        "target": {
            "file": "net/ethtool/stats.c",
            "function": "stats_prepare_data"
        },
        "digest": {
            "length": 1801.0,
            "function_hash": "58921179879538961905957414430768548654"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-5d37857c",
        "target": {
            "file": "net/ethtool/cabletest.c",
            "function": "ethnl_act_cable_test"
        },
        "digest": {
            "length": 885.0,
            "function_hash": "216666592697564393833336888717734862192"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-6a19e30e",
        "target": {
            "file": "net/ethtool/linkstate.c",
            "function": "linkstate_prepare_data"
        },
        "digest": {
            "length": 1087.0,
            "function_hash": "82265453256468625813884649649351750792"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-6eab6e64",
        "target": {
            "file": "net/ethtool/phy.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "92858165573447703072569637508588003996",
                "138745100084482318732272198560020404610",
                "16776571792471152245870022104597437278",
                "308362058912945713849968615316746556613"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-7217e38b",
        "target": {
            "file": "net/ethtool/pse-pd.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "318145104635377246446937298466313630134",
                "211792931547402765951024250915864158028",
                "185222315321079010827342065905906581682",
                "27853960527705746484573564539593869248",
                "24631503047484876781145646996700029675",
                "19035387088718106422929114888160245349",
                "4213027261071252938261196474775271499",
                "170965348749501591024384013706326924309"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-74c20a20",
        "target": {
            "file": "net/ethtool/netlink.c",
            "function": "ethnl_req_get_phydev"
        },
        "digest": {
            "length": 378.0,
            "function_hash": "80586956675591194140915032990830541076"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-81658eb3",
        "target": {
            "file": "net/ethtool/pse-pd.c",
            "function": "pse_prepare_data"
        },
        "digest": {
            "length": 462.0,
            "function_hash": "231265947350339962740190778057304944311"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-82cad88b",
        "target": {
            "file": "net/ethtool/netlink.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60218164699453598950097979393367819404",
                "266516712291881962057903646924244776856",
                "66887382316884929891576869159620541631",
                "339700017351246177278355323738120782841",
                "26410044499327209871219458782668995765"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-842040b8",
        "target": {
            "file": "net/ethtool/stats.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "176678727124440847441618629033736607037",
                "269462398600806186118193104306264978288",
                "18279365462565419540361498504179912720",
                "99094742513328104093607035213929137982"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-85b78096",
        "target": {
            "file": "net/ethtool/cabletest.c",
            "function": "ethnl_act_cable_test_tdr"
        },
        "digest": {
            "length": 1043.0,
            "function_hash": "226275113327867027192391628048245529424"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-8789005c",
        "target": {
            "file": "net/ethtool/netlink.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "108157150724300264624855842403933806637",
                "28940786983540185351827185045991173463",
                "314410768886814652854006247766444214050",
                "63868896203128398365623896770682185959",
                "280342570187459579739146168997781975862",
                "145463318573831588496179780183791162518",
                "234980594015540613498664854073522962266",
                "32758383797699079321888350125774609499",
                "38704884849425835104427598188146522326"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-8ad466c7",
        "target": {
            "file": "net/ethtool/cabletest.c",
            "function": "ethnl_act_cable_test_tdr"
        },
        "digest": {
            "length": 1043.0,
            "function_hash": "226275113327867027192391628048245529424"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-9272789d",
        "target": {
            "file": "net/ethtool/plca.c",
            "function": "plca_get_cfg_prepare_data"
        },
        "digest": {
            "length": 684.0,
            "function_hash": "137845752431177883570578577713737627398"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-92c1e599",
        "target": {
            "file": "net/ethtool/phy.c",
            "function": "ethnl_phy_parse_request"
        },
        "digest": {
            "length": 405.0,
            "function_hash": "60079087455113929738684550776486202892"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-98343a28",
        "target": {
            "file": "net/ethtool/plca.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "238090751665715728670568177518365639071",
                "44552856578477222825169203000846918791",
                "317659967138947093507643122128200375468",
                "210362501761325458462431959651902940069",
                "317337626082592286623479885560099682478",
                "20485739360689400083622602904566815150",
                "187477900156953852030379989173159265023",
                "243466125349725219615829861563878292944",
                "238090751665715728670568177518365639071",
                "44552856578477222825169203000846918791",
                "317659967138947093507643122128200375468",
                "210362501761325458462431959651902940069"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-9ec55c0e",
        "target": {
            "file": "net/ethtool/pse-pd.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "318145104635377246446937298466313630134",
                "211792931547402765951024250915864158028",
                "185222315321079010827342065905906581682",
                "27853960527705746484573564539593869248",
                "24631503047484876781145646996700029675",
                "19035387088718106422929114888160245349",
                "4213027261071252938261196474775271499",
                "170965348749501591024384013706326924309"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-9fcec9d0",
        "target": {
            "file": "net/ethtool/plca.c",
            "function": "ethnl_set_plca"
        },
        "digest": {
            "length": 963.0,
            "function_hash": "109147544442507114770501759478595921212"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-ac516e0b",
        "target": {
            "file": "net/ethtool/netlink.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "108157150724300264624855842403933806637",
                "28940786983540185351827185045991173463",
                "314410768886814652854006247766444214050",
                "63868896203128398365623896770682185959",
                "280342570187459579739146168997781975862",
                "145463318573831588496179780183791162518",
                "234980594015540613498664854073522962266",
                "32758383797699079321888350125774609499",
                "38704884849425835104427598188146522326"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-bd9428f4",
        "target": {
            "file": "net/ethtool/stats.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "176678727124440847441618629033736607037",
                "269462398600806186118193104306264978288",
                "18279365462565419540361498504179912720",
                "99094742513328104093607035213929137982"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-be927786",
        "target": {
            "file": "net/ethtool/linkstate.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "313230164395406225384535286279911045743",
                "305258745144502432671159211048622119592",
                "72541554063749720475931130107034157918",
                "155742096720600622777151011487586114312"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-c1843020",
        "target": {
            "file": "net/ethtool/netlink.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60218164699453598950097979393367819404",
                "266516712291881962057903646924244776856",
                "66887382316884929891576869159620541631",
                "339700017351246177278355323738120782841",
                "26410044499327209871219458782668995765"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-c4cc9204",
        "target": {
            "file": "net/ethtool/pse-pd.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "318145104635377246446937298466313630134",
                "211792931547402765951024250915864158028",
                "185222315321079010827342065905906581682",
                "27853960527705746484573564539593869248",
                "24631503047484876781145646996700029675",
                "19035387088718106422929114888160245349",
                "4213027261071252938261196474775271499",
                "170965348749501591024384013706326924309"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-c5dafe0f",
        "target": {
            "file": "net/ethtool/cabletest.c",
            "function": "ethnl_act_cable_test"
        },
        "digest": {
            "length": 885.0,
            "function_hash": "216666592697564393833336888717734862192"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-c708d5c2",
        "target": {
            "file": "net/ethtool/netlink.c",
            "function": "ethnl_req_get_phydev"
        },
        "digest": {
            "length": 378.0,
            "function_hash": "80586956675591194140915032990830541076"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-c792dffc",
        "target": {
            "file": "net/ethtool/linkstate.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "313230164395406225384535286279911045743",
                "305258745144502432671159211048622119592",
                "72541554063749720475931130107034157918",
                "155742096720600622777151011487586114312"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-cb6932f3",
        "target": {
            "file": "net/ethtool/strset.c",
            "function": "strset_prepare_data"
        },
        "digest": {
            "length": 1181.0,
            "function_hash": "52301631654371211958339638756507095563"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-cb94861b",
        "target": {
            "file": "net/ethtool/plca.c",
            "function": "plca_get_status_prepare_data"
        },
        "digest": {
            "length": 687.0,
            "function_hash": "298406068839594453461444770980037527282"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-cce4fea0",
        "target": {
            "file": "net/ethtool/netlink.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "108157150724300264624855842403933806637",
                "28940786983540185351827185045991173463",
                "314410768886814652854006247766444214050",
                "63868896203128398365623896770682185959",
                "280342570187459579739146168997781975862",
                "145463318573831588496179780183791162518",
                "234980594015540613498664854073522962266",
                "32758383797699079321888350125774609499",
                "38704884849425835104427598188146522326"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-cea17c20",
        "target": {
            "file": "net/ethtool/strset.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "1352439987098510398929280718809908006",
                "275444180421399694846142060988352871094",
                "221011879778587059503795386300187355285",
                "269891240787683901227978275037340134812"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-d2da21df",
        "target": {
            "file": "net/ethtool/phy.c",
            "function": "ethnl_phy_parse_request"
        },
        "digest": {
            "length": 405.0,
            "function_hash": "60079087455113929738684550776486202892"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-d3b0ebfc",
        "target": {
            "file": "net/ethtool/netlink.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "60218164699453598950097979393367819404",
                "266516712291881962057903646924244776856",
                "66887382316884929891576869159620541631",
                "339700017351246177278355323738120782841",
                "26410044499327209871219458782668995765"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-da8bca81",
        "target": {
            "file": "net/ethtool/strset.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "1352439987098510398929280718809908006",
                "275444180421399694846142060988352871094",
                "221011879778587059503795386300187355285",
                "269891240787683901227978275037340134812"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-dbf69762",
        "target": {
            "file": "net/ethtool/linkstate.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "313230164395406225384535286279911045743",
                "305258745144502432671159211048622119592",
                "72541554063749720475931130107034157918",
                "155742096720600622777151011487586114312"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-dd251a75",
        "target": {
            "file": "net/ethtool/pse-pd.c",
            "function": "ethnl_set_pse"
        },
        "digest": {
            "length": 967.0,
            "function_hash": "202990293468786883444920276937645559926"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-e2716c3e",
        "target": {
            "file": "net/ethtool/pse-pd.c",
            "function": "pse_prepare_data"
        },
        "digest": {
            "length": 462.0,
            "function_hash": "231265947350339962740190778057304944311"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-e5a5104a",
        "target": {
            "file": "net/ethtool/pse-pd.c",
            "function": "pse_prepare_data"
        },
        "digest": {
            "length": 462.0,
            "function_hash": "231265947350339962740190778057304944311"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-e9d8a528",
        "target": {
            "file": "net/ethtool/plca.c",
            "function": "plca_get_status_prepare_data"
        },
        "digest": {
            "length": 687.0,
            "function_hash": "298406068839594453461444770980037527282"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-ea7ef7ec",
        "target": {
            "file": "net/ethtool/stats.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "176678727124440847441618629033736607037",
                "269462398600806186118193104306264978288",
                "18279365462565419540361498504179912720",
                "99094742513328104093607035213929137982"
            ]
        },
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@637399bf7e77797811adf340090b561a8f9d1213",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-ed0c51fb",
        "target": {
            "file": "net/ethtool/cabletest.c",
            "function": "ethnl_act_cable_test"
        },
        "digest": {
            "length": 885.0,
            "function_hash": "216666592697564393833336888717734862192"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@639c70352958735addbba5ae7dd65985da96e061",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-f1320da3",
        "target": {
            "file": "net/ethtool/plca.c",
            "function": "plca_get_cfg_prepare_data"
        },
        "digest": {
            "length": 684.0,
            "function_hash": "137845752431177883570578577713737627398"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2025-21921-f2c98c31",
        "target": {
            "file": "net/ethtool/plca.c",
            "function": "plca_get_status_prepare_data"
        },
        "digest": {
            "length": 687.0,
            "function_hash": "298406068839594453461444770980037527282"
        },
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f458fa42c29144cef280e05bc49fc21b873d897",
        "signature_version": "v1"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.19
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.7