2 matches found
CVE-2025-21641 mptcp: sysctl: blackhole timeout: avoid using current->nsproxy
In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using current-nsproxy As mentioned in the previous commit, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...
0.00172EPSS
SaveExploits0References2
CVE-2025-21637
CVE-2025-21637 affects the Linux kernel SCTP sysctl path for udp_port. The issue arises from using current->nsproxy via the net structure, risking NULL nsproxy (e.g., when the current task is exiting) and potentially triggering a fault. The fix described in the sources relies on obtaining net ...
7.1CVSS6.9AI score0.00207EPSS
SaveExploits0References6Affected Software1
20