Lucene search
+L

7 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/27 12:0 a.m.4 views

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2025-21640)

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

7.1CVSS6.1AI score0.00232EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.5 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the net structure via current is not recommended for various reasons: - Inconsistency: obtaining information from th...

5.5CVSS6.2AI score0.00232EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2025/03/14 7:0 a.m.5 views

sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy

...

7.1CVSS7.3AI score0.00232EPSS
SaveExploits0
OSV
OSV
added 2025/01/19 11:15 a.m.1 views

DEBIAN-CVE-2025-21640

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

5.5CVSS5.6AI score0.00232EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/19 11:15 a.m.4 views

UBUNTU-CVE-2025-21640

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

7.1CVSS6.2AI score0.00232EPSS
SaveExploits0References45
CVE
CVE
added 2025/01/19 10:17 a.m.191 views

CVE-2025-21640

Summary of CVE-2025-21640 (Linux kernel SCTP): The vulnerability is in the Linux kernel SCTP sysctl handling for cookie_hmac_alg, linked to using current->nsproxy. The description notes that current->nsproxy can be NULL (e.g., when the current task is exiting), which can lead to an Oops (nu...

7.1CVSS6.9AI score0.00232EPSS
SaveExploits0References10Affected Software1
Debian CVE
Debian CVE
added 2025/01/19 10:17 a.m.9 views

CVE-2025-21640

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookiehmacalg: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

7.1CVSS5.6AI score0.00232EPSS
SaveExploits0
Rows per page
Query Builder