CVE-2025-21787

EUVD-2025-5139
In the Linux kernel, the following vulnerability has been resolved:

team: better TEAM_OPTION_TYPE_STRING validation

syzbot reported following splat [1]

Make sure user-provided data contains one nul byte.

[1]
 BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:633 [inline]
 BUG: KMSAN: uninit-value in string+0x3ec/0x5f0 lib/vsprintf.c:714
  string_nocheck lib/vsprintf.c:633 [inline]
  string+0x3ec/0x5f0 lib/vsprintf.c:714
  vsnprintf+0xa5d/0x1960 lib/vsprintf.c:2843
  __request_module+0x252/0x9f0 kernel/module/kmod.c:149
  team_mode_get drivers/net/team/team_core.c:480 [inline]
  team_change_mode drivers/net/team/team_core.c:607 [inline]
  team_mode_option_set+0x437/0x970 drivers/net/team/team_core.c:1401
  team_option_set drivers/net/team/team_core.c:375 [inline]
  team_nl_options_set_doit+0x1339/0x1f90 drivers/net/team/team_core.c:2662
  genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline]
  genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]
  genl_rcv_msg+0x1214/0x12c0 net/netlink/genetlink.c:1210
  netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2543
  genl_rcv+0x40/0x60 net/netlink/genetlink.c:1219
  netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline]
  netlink_unicast+0xf52/0x1260 net/netlink/af_netlink.c:1348
  netlink_sendmsg+0x10da/0x11e0 net/netlink/af_netlink.c:1892
  sock_sendmsg_nosec net/socket.c:718 [inline]
  __sock_sendmsg+0x30f/0x380 net/socket.c:733
  ____sys_sendmsg+0x877/0xb60 net/socket.c:2573
  ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2627
  __sys_sendmsg net/socket.c:2659 [inline]
  __do_sys_sendmsg net/socket.c:2664 [inline]
  __se_sys_sendmsg net/socket.c:2662 [inline]
  __x64_sys_sendmsg+0x212/0x3c0 net/socket.c:2662
  x64_sys_call+0x2ed6/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:47
  do_syscall_x64 arch/x86/entry/common.c:52 [inline]
  do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
3.3 ≤
𝑥
< 6.1.129
linuxlinux_kernel
6.2 ≤
𝑥
< 6.6.79
linuxlinux_kernel
6.7 ≤
𝑥
< 6.12.16
linuxlinux_kernel
6.13 ≤
𝑥
< 6.13.4
linuxlinux_kernel
6.14:rc1
linuxlinux_kernel
6.14:rc2
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensSIMATIC S7-1500 TM MFP - GNU\/Linux subsystem
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.170-3
fixed
bookworm (security)
6.1.174-1
fixed
bullseye
vulnerable
bullseye (security)
5.10.257-1
fixed
forky
7.0.9-1
fixed
sid
7.0.10-1
fixed
trixie
6.12.86-1
fixed
trixie (security)
6.12.90-2
fixed
linux-6.1
bullseye (security)
6.1.174-1~deb11u1
fixed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cluster-md-kmp-default
suse enterprise server 12 SP5
4.12.14-122.261.1
fixed
dlm-kmp-default
suse enterprise server 12 SP5
4.12.14-122.261.1
fixed
gfs2-kmp-default
suse enterprise server 12 SP5
4.12.14-122.261.1
fixed
kernel-64kb
suse enterprise desktop 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.3.1
fixed
kernel-azure
suse enterprise sap 15 SP6
6.4.0-150600.8.40.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.20.3.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.8.40.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.3.1
fixed
kernel-default
suse enterprise desktop 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise server 12 SP5
4.12.14-122.261.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.3.1
fixed
kernel-default-base
suse enterprise desktop 15 SP6
6.4.0-150600.23.53.1.150600.12.24.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.3.1.150700.17.2.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.53.1.150600.12.24.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.3.1.150700.17.2.1
fixed
suse enterprise server 12 SP5
4.12.14-122.261.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.53.1.150600.12.24.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.3.1.150700.17.2.1
fixed
kernel-default-man
suse enterprise server 12 SP5
4.12.14-122.261.1
fixed
kernel-docs
suse enterprise desktop 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.3.1
fixed
kernel-macros
suse enterprise desktop 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise server 12 SP5
4.12.14-122.261.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.3.1
fixed
kernel-obs-build
suse enterprise desktop 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.3.1
fixed
kernel-source
suse enterprise desktop 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise server 12 SP5
4.12.14-122.261.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.3.1
fixed
kernel-source-azure
suse enterprise sap 15 SP6
6.4.0-150600.8.40.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.20.3.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.8.40.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.3.1
fixed
kernel-syms
suse enterprise desktop 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise server 12 SP5
4.12.14-122.261.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.3.1
fixed
kernel-syms-azure
suse enterprise sap 15 SP6
6.4.0-150600.8.40.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.20.3.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.8.40.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.3.1
fixed
kernel-zfcpdump
suse enterprise desktop 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise desktop 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise sap 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.3.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.53.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.3.1
fixed
ocfs2-kmp-default
suse enterprise server 12 SP5
4.12.14-122.261.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
kernel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-debug
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-debug-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-debug-devel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-debug-devel-matched
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-debug-modules
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-debug-modules-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-debug-modules-extra
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-devel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-devel-matched
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-modules
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-modules-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-64k-modules-extra
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-abi-stablelists
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-debug
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-debug-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-debug-devel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-debug-devel-matched
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-debug-modules
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-debug-modules-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-debug-modules-extra
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-debug-uki-virt
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-devel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-devel-matched
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-doc
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-modules
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-modules-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-modules-extra
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-debug
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-debug-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-debug-devel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-debug-modules
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-debug-modules-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-debug-modules-extra
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-devel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-modules
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-modules-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-64k-modules-extra
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-debug
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-debug-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-debug-devel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-debug-modules
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-debug-modules-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-debug-modules-extra
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-devel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-modules
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-modules-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-rt-modules-extra
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-tools
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-tools-libs
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-tools-libs-devel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-uki-virt
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-uki-virt-addons
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-zfcpdump
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-zfcpdump-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-zfcpdump-devel
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-zfcpdump-devel-matched
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-zfcpdump-modules
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-zfcpdump-modules-core
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
kernel-zfcpdump-modules-extra
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
libperf
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
perf
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
python3-perf
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
rtla
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed
rv
RHEL 9
0:5.14.0-611.5.1.el9_7
fixed