CVE-2025-21635

Source
https://cve.org/CVERecord?id=CVE-2025-21635
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21635.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-21635
Downstream
AZL (2)
BELL (1)
DEBIAN (1)
ECHO (1)
MINI (1)
OESA (2)
ROOT (3)
SUSE (11)
UBUNTU (1)
Related
Published
2025-01-19T10:17:53Z
Modified
2026-11-01T02:31:02Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
Details

In the Linux kernel, the following vulnerability has been resolved:

rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy

As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:

  • Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns.

  • current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2).

The per-netns structure can be obtained from the table->data using container_of(), then the 'net' one can be retrieved from the listen socket (if available).

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21635.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c6a58ffed53612be86b758df1cdb0b0f4305e9cb
Fixed
6f353c2230c199f343406c08482940ec5d8ba89c
Fixed
33b3e09a489a31b30342b77cc55290f025d95c7e
Fixed
de8d6de0ee27be4b2b1e5b06f04aeacbabbba492
Fixed
7f5611cbc4871c7fb1ad36c2e5a9edad63dca95c

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21635.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.6.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.10

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21635.json"