CVE-2025-22050: Linux Kernel

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: usbnet:fix NPE during rx_complete Missing usbnet_going_away Check in Critical Path. The usb_submit_urb function lacks a usbnet_going_away validation, whereas __usbnet_queue_skb includes this check. This inconsistency creates a race condition where: A URB request may succeed, but the corresponding SKB data fails to be queued. Subsequent processes: (e.g., rx_complete → defer_bh → __skb_unlink(skb, list)) attempt to access skb->next, triggering a NULL pointer dereference (Kernel Panic).

Affected products

• Linux Linux Kernel: from 5.15.168, before 5.15.180 (fixed in 5.15.180); from 6.1.113, before 6.1.134 (fixed in 6.1.134); from 6.6.54, before 6.6.87 (fixed in 6.6.87); from 6.10.13, before 6.11 (fixed in 6.11); from 6.11.2, before 6.12.23 (fixed in 6.12.23); from 6.13, before 6.13.11 (fixed in 6.13.11); …

Published 2025-04-16. Last modified 2026-06-17.