Log in Start free

Vulnerability · Published Jan 19, 2025 · Assigned by Linux

CVE-2025-21637sctp: sysctl: udp_port: avoid using current->nsproxy

High 7.1

In plain English

A high-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.2%top 88.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udp_port: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns. - current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2). The 'net' structure can be obtained from the table->data using container_of(). Note that table->data could also be used directly, but that would increase the size of this fix, while 'sctp.ctl_sock' still needs to be retrieved from 'net' structure.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.128-1DEBIAN-CVE-2025-21637
Debian:12linux6.1.128-1DSA-5860-1
Debian:13linux6.12.10-1DEBIAN-CVE-2025-21637
Debian:14linux6.12.10-1DEBIAN-CVE-2025-21637
Ubuntu:22.04:LTSlinux5.15.0-135.146UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux6.8.0-60.63UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-aws5.15.0-1080.87UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-aws6.8.0-1029.31UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1029.31~22.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-azure5.15.0-1084.93UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-azure6.8.0-1029.34UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1012.12~24.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1029.34~22.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1084.93.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1016.17UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-gcp5.15.0-1079.88UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-gcp6.8.0-1030.32UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1011.11~24.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1030.32~22.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-gke5.15.0-1077.83UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-gke6.8.0-1025.29UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1062.70UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1012.14UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-21.21~24.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-60.63~22.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-ibm5.15.0-1072.75UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-ibm6.8.0-1026.26UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1026.26~22.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-intel-iot-realtime5.15.0-1073.75UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1075.81UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-kvm5.15.0-1076.81UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-135.146UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-60.63.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-60.63.1~22.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1074.75UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1028.31UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1007.7UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1028.31~22.04.1UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1028.31.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1033.33UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1008.8UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1021.21UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1017.17UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1028.28UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-oracle5.15.0-1077.83UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-oracle6.8.0-1026.27UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1026.27~22.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-raspi5.15.0-1074.77UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-raspi6.8.0-1028.32UBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-riscv6.8.0-60.63.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-62.65~22.04.1UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21637
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2025-21637
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1044.48UBUNTU-CVE-2025-21637

Affected products (as reported)

VendorProductVersions
Linux Linux 046c052b475e7119b6a30e3483e2888fc606a2f8 – before 0a0966312ac3eedd7f5f2a766ed4702df39a9a65046c052b475e7119b6a30e3483e2888fc606a2f8 – before e919197fb8616331f5dc81e4c3cc3d12769cb725046c052b475e7119b6a30e3483e2888fc606a2f8 – before 55627918febdf9d71107a1e68d1528dc591c9a15046c052b475e7119b6a30e3483e2888fc606a2f8 – before 5b77d73f3be5102720fb685b9e6900e3500e1096046c052b475e7119b6a30e3483e2888fc606a2f8 – before c10377bbc1972d858eaf0ab366a311b39f8ef1b6
Linux Linux 5.11

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

References