Security tracker / CVE-2025-21855

CVE-2025-21855

ibmvnic: Don't reference skb after sending to VIOS

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 032c5e82847a ("Driver for IBM System i/p VNIC protocol").
 carnil> Vulnerable versions: 4.5.

Bugs

Status

Branch	Status
upstream	released (6.14-rc4) [bdf5d13aa05ec314d4385b31ac974d6c7e0997c9]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.13-upstream-stable	released (6.13.5) [abaff2717470e4b5b7c0c3a90e128b211a23da09]
6.12-upstream-stable	released (6.12.17) [25dddd01dcc8ef3acff964dbb32eeb0d89f098e9]
6.6-upstream-stable	released (6.6.80) [093b0e5c90592773863f300b908b741622eef597]
6.1-upstream-stable	released (6.1.130) [501ac6a7e21b82e05207c6b4449812d82820f306]
5.10-upstream-stable	needed
sid	released (6.12.17-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.133-1)
5.10-bullseye-security	needed