CVE-2025-21640
EUVD-2025-258919.01.2025, 11:15
In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns. - current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2). The 'net' structure can be obtained from the table->data using container_of(). Note that table->data could also be used directly, as this is the only member needed from the 'net' structure, but that would increase the size of this fix, to use '*data' everywhere 'net->sctp.sctp_hmac_alg' is used.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 3.8 ≤ 𝑥 < 6.1.125 |
| linux | linux_kernel | 6.2 ≤ 𝑥 < 6.6.72 |
| linux | linux_kernel | 6.7 ≤ 𝑥 < 6.12.10 |
| linux | linux_kernel | 6.13:rc1 |
| linux | linux_kernel | 6.13:rc2 |
| linux | linux_kernel | 6.13:rc3 |
| linux | linux_kernel | 6.13:rc4 |
| linux | linux_kernel | 6.13:rc5 |
| linux | linux_kernel | 6.13:rc6 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | 𝑥 < * | ADP |
Debian Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cluster-md-kmp-default |
| ||||||||||||||
| dlm-kmp-default |
| ||||||||||||||
| gfs2-kmp-default |
| ||||||||||||||
| kernel-64kb |
| ||||||||||||||
| kernel-azure |
| ||||||||||||||
| kernel-default |
| ||||||||||||||
| kernel-default-base |
| ||||||||||||||
| kernel-default-man |
| ||||||||||||||
| kernel-obs-build |
| ||||||||||||||
| kernel-source |
| ||||||||||||||
| kernel-source-azure |
| ||||||||||||||
| kernel-zfcpdump |
| ||||||||||||||
| ocfs2-kmp-default |
|
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| bpftool |
| ||
| bpftool-debuginfo |
| ||
| kernel |
| ||
| kernel-debuginfo |
| ||
| kernel-debuginfo-common-aarch64 |
| ||
| kernel-debuginfo-common-x86_64 |
| ||
| kernel-devel |
| ||
| kernel-headers |
| ||
| kernel-libbpf |
| ||
| kernel-libbpf-devel |
| ||
| kernel-libbpf-static |
| ||
| kernel-livepatch-6.1.127-135.201 |
| ||
| kernel-modules-extra |
| ||
| kernel-modules-extra-common |
| ||
| kernel-tools |
| ||
| kernel-tools-debuginfo |
| ||
| kernel-tools-devel |
| ||
| perf |
| ||
| perf-debuginfo |
| ||
| python3-perf |
| ||
| python3-perf-debuginfo |
|
Azure Linux Releases
Common Weakness Enumeration
References