What’s Vulnerable › Vulnerabilities

CVE-2025-21833: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-06 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE There is a WARN_ON_ONCE to catch an unlikely situation when domain_remove_dev_pasid can't find the `pasid`. In case it nevertheless happens we must avoid using a NULL pointer.

Affected products

• Linux kernel: before 6.13.3 — fixed in 6.13.3

How to fix

Upgrade to a fixed version: Linux kernel 6.13.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/60f030f7418d3f1d94f2fb207fe3080e1844630b
• https://git.kernel.org/stable/c/68ec78beb4a3fb0877cbaaf49758c85410c05977
• https://git.kernel.org/stable/c/df96876be3b064aefc493f760e0639765d13ed0d

Get alerted when CVE-2025-21833 or the next vulnerability affects your stack