CVE-2025-21639
EUVD-2025-258819.01.2025, 11:15
In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rto_min/max: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns. - current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2). The 'net' structure can be obtained from the table->data using container_of(). Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.rto_min/max' is used.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 3.13 ≤ 𝑥 < 6.1.125 |
| linux | linux_kernel | 6.2 ≤ 𝑥 < 6.6.72 |
| linux | linux_kernel | 6.7 ≤ 𝑥 < 6.12.10 |
| linux | linux_kernel | 6.13:rc1 |
| linux | linux_kernel | 6.13:rc2 |
| linux | linux_kernel | 6.13:rc3 |
| linux | linux_kernel | 6.13:rc4 |
| linux | linux_kernel | 6.13:rc5 |
| linux | linux_kernel | 6.13:rc6 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Siemens | SIMATIC S7-1500 TM MFP - GNU\/Linux subsystem | 𝑥 < * | ADP |
Debian Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cluster-md-kmp-default |
| ||||||||||||||
| dlm-kmp-default |
| ||||||||||||||
| gfs2-kmp-default |
| ||||||||||||||
| kernel-64kb |
| ||||||||||||||
| kernel-azure |
| ||||||||||||||
| kernel-default |
| ||||||||||||||
| kernel-default-base |
| ||||||||||||||
| kernel-default-man |
| ||||||||||||||
| kernel-docs |
| ||||||||||||||
| kernel-macros |
| ||||||||||||||
| kernel-obs-build |
| ||||||||||||||
| kernel-source |
| ||||||||||||||
| kernel-source-azure |
| ||||||||||||||
| kernel-syms |
| ||||||||||||||
| kernel-syms-azure |
| ||||||||||||||
| kernel-zfcpdump |
| ||||||||||||||
| ocfs2-kmp-default |
|
Common Weakness Enumeration
References