CVE-2025-21904

CVE-2025-21904 affects the Linux kernel’s caif_virtio path. The vulnerability stems from a wrong pointer check in cfv_probe: del_vqs() frees virtqueues, and the code previously dereferenced cfv->vdev before confirming NULL. The correct check is cfv->vq_tx for NULL prior to del_vqs(). Upstre...