CVE-2025-21713 | Linux Kernel up to 6.12.12/6.13.1 spapr_tce_set_window null pointer dereference (Nessus ID 236983 / WID-SEC-2025-0453)

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.12/6.13.1. The affected element is the function spapr_tce_set_window. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2025-21713. Access to the local network is required for this attack to succeed. There is no exploit available. It is advisable to upgrade the affected component.