PT-2025-4322

CVE-2025-21641

·

Published

2025-01-08

·

Updated

2025-01-21

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue concerns the Linux kernel, specifically the mptcp subsystem and its handling of the blackhole timeout via sysctl. The problem arises from using the net structure via current, which is not recommended due to inconsistency and potential null pointer dereferences. This can lead to errors, particularly when the current task is exiting. The pernet structure can be obtained from the table->data using container of().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾