CVE-2025-21903

CVE-2025-21903 affects the Linux kernel’s MCTP over I3C header handling: daddr may be NULL when no neighbour table entry exists, in which case the TX packet should be dropped; saddr may also be NULL if transmitted by a different protocol. The issue is escalated as a local vector with a Medium bas...