cve 2025 21948

CVE-2025-21948 is a medium-severity vulnerability in the Linux kernel's HID appleir driver that can be triggered by malformed HID reports, leading to a NULL-pointer dereference and local denial-of-service. Discovered via Syzkaller, the issue has been patched by kernel maintainers and included in vendor security advisories. Administrators are advised to apply vendor kernel updates or disable the appleir driver where feasible to mitigate the DoS risk. This tag covers discussion of the vulnerability, its impact, and remediation steps for affected Linux systems.