VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Jan 19, 2025· Updated Jun 17, 2026

CVE-2025-21641

CVE-2025-21641

Description

In the Linux kernel, the following vulnerability has been resolved:

mptcp: sysctl: blackhole timeout: avoid using current->nsproxy

As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons:

- Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.

- current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).

The 'pernet' structure can be obtained from the table->data using container_of().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Linux/Kernel9 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.12,<6.12.10
    • cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*
    • (no CPE)range: 6.12
    • (no CPE)
  • osv-coords
    pkg:linux/kernel
    Range: >= 6.12.0, < 6.12.10

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.