CVE-2025-21710

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A problem has been identified in the Linux kernel's handling of extreme memory squeeze situations, specifically in the way TCP handles window advertising. Under memory pressure, a socket endpoint may temporarily advertise a zero-sized window, but this is not stored as part of the socket data. As a result, the algorithm selecting a new value will consistently fail to advertise a non-zero window once enough memory has been freed, causing the peer to not send any data. This issue occurs on the server side and affects regular sockets with default settings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.