VULNERABILITY INTELLIGENCE
CVE-2025-21843
CVSS score5.5 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2025-03-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: avoid garbage value in panthor_ioctl_dev_query() 'priorities_info' is uninitialized, and the uninitialized value is copied to user object when calling PANTHOR_UOBJ_SET(). Using memset to initialize 'priorities_info' to avoid this garbage value problem.
Weakness classification
- nvd@nist.gov: CWE-908
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-908