CVE-2025-21843: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: avoid garbage value in panthor_ioctl_dev_query() 'priorities_info' is uninitialized, and the uninitialized value is copied to user object when calling PANTHOR_UOBJ_SET(). Using memset to initialize 'priorities_info' to avoid this garbage value problem.

Affected products

• Linux Linux Kernel: from 6.13, before 6.13.4 (fixed in 6.13.4); version 6.14 only

Published 2025-03-07. Last modified 2026-06-17.