CVE-2021-20177

CVE-2021-20177: Linux kernel flaw in string matching for packets; a privileged user (root or CAP_NET_ADMIN) inserting iptables rules can trigger a kernel panic. Affected kernels before 5.5-rc1. Mitigation is to apply a patch/upstream fix (5.5-rc1 or newer).

CVE-2025-21898

CVE-2025-21898 (Linux kernel) : The vulnerability centers on ftrace calculation in function_stat_show(), where division-by-zero could occur during stddev computation. The fix introduces a check on the denominator expression x * (x - 1) * 1000, ensuring it does not produce zero before performing t...