CVE-2025-8872

This CVE affects Arista EOS with OSPFv3 configured. A specially crafted IPv6 OSPFv3 packet can cause the ospfv3 process to have high CPU utilization, potentially restarting the process and disrupting OSPFv3 routes. The Arista advisory lists affected EOS trains: 4.34.x (4.34.1F and below), 4.33.x ...

CVE-2025-8872 A specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

EUVD-2025-203680

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

CVE-2025-68216 LoongArch: BPF: Disable trampoline for kernel module function trace

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

PT-2025-51781

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

The vulnerabilities of the infostat.cgi and cstecgi.cgi scripts in the TOTOLINK A720R, LR1200GB, and NR1800X networking device software allow a malicious individual to cause service interruptions or execute arbitrary code.

The vulnerability of the infostat.cgi and cstecgi.cgi microprogramming devices of the TOTOLINK A720R, LR1200GB, and NR1800X networks devices is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

CVE-2025-8872: Uncontrolled Resource Consumption

On affected platforms running Arista EOS with OSPFv3 configured, a specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted. This may cause disruption in the OSFPv3 routes on the switch. This issue was discovered...

Security Advisory 0128

Security Advisory 0128 PDF Date: December 16, 2025 Revision | Date | Changes ---|---|--- 1.0 | December 16, 2025 | Initial release The CVE-ID tracking this issue: CVE-2025-8872 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 6.5 / 10 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 7....

The vulnerability of the sb_min_blocksize() function in the fs/fat/inode.c module of the Linux kernel file system allows a attacker to increase privileges or cause service failures.

The vulnerability of the sbminblocksize function in the fs/fat/inode.c module of the Linux kernel file system is related to the lack of checking of the returned value. Exploiting this vulnerability can allow a remote attacker to increase privileges or cause service failures...

The vulnerability of the ufs-exynos.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ufs-exynos.c component in the Linux operating system is related to reading data from within acceptable limits. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the hv_netvsc component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hvnetvsc component in the Linux operating system is related to the lack of synchronization. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the erofs_fc_fill_super() function in the fs/erofs/super.c module of the EROFS Enhanced Read-Only File System library in the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the erofsfcfillsuper function in the fs/erofs/super.c module of the EROFS file system support for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the MySQL Server, the database management system optimizer, allows a hacker to cause a service failure.

The vulnerability of the MySQL Server database management system optimizer is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Performance Monitor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to trigger a service failure.

The vulnerability of the Performance Monitor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Linux operating system’s kernel driver components allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s kernel driver component is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the appletalk component in the Linux operating system’s kernel allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of the appletalk component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

The vulnerability in the s390/char/sclp.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the s390/char/sclp.c component of the Linux operating system’s kernel is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to reading data beyond the allowed buffer limits, allows an attacker to access confidential data and cause service interruptions.

The vulnerability of the Linux operating system’s kernel is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to access confidential data and also cause service failures...

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL database management system’s server allows a hacker to trigger a service failure.

The vulnerability of the MySQL Server component relates to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the cstecgi.cgi microprogramming software for TOTOLINK NR1800X and LR1200GB routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the cstecgi.cgi microprogramming software for TOTOLINK NR1800X and LR1200GB routers is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...