CVE-2025-22050
usbnet:fix NPE during rx_complete
Reported by linux · Published April 16, 2025
In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rx_complete Missing usbnet_going_away Check in Critical Path. The usb_submit_urb function lacks a usbnet_going_away validation, whereas __usbnet_queue_skb includes this check. This inconsistency creates a race condition where: A URB request may succeed, but the corresponding SKB data fails to be queued. Subsequent processes: (e.g., rx_complete → defer_bh → __skb_unlink(skb, list)) attempt to access skb->next, triggering a NULL pointer dereference (Kernel Panic).
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| linux_kernel | linux | 6.14.2, 6.13.11, 6.12.23, 6.11, 6.6.87, 6.1.134, 5.15.180 |
| Linux | Linux | fd9ee3f0d6a53844f65efde581c91bbb0ff749ac, d689645cd1594ea1d13cb0c404f8ad1011353e0e, acacd48a37b52fc95f621765762c04152b58d642, 95789c2f94fd29dce8759f9766baa333f749287c, 6.12, 0f10f83acfd619e13c64d6705908dfd792f19544, 0c30988588b28393e3e8873d5654f910e86391ba |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | b80aacfea6e8d6ed6e430aa13922d6ccf044415a, 869caa8de8cb94514df704ccbe0b024fda4b9398, 1e44ee6cdd123d6cfe78b4a94e1572e23bbb58ce |
| Linux | Linux | 6.12, 0, 5.15.180 |
| Linux | Linux | 6.11.2, 6.12, 5.15.180 |
| linux | linux_kernel | 6.6.54, 6.12, 6.12 |
Timeline
- Apr 16, 2025 CVE Published
- Apr 17, 2025 EPSS Score (30 in total, the first dated here)
- Apr 17, 2025 Coalition ESS Score (30 in total, the first dated here)
- Dec 21, 2025 Security Advisory (322 in total, the first dated here)
- Apr 20, 2026 Distribution Patch (314 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-22050
vulnetix vdb fixes CVE-2025-22050Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-22050/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart