Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-21637

sctp: sysctl: udp_port: avoid using current->nsproxy

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udp_port: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the reader's/writer's netns vs only from the opener's netns. - current->nsproxy can be NULL in some cases, resulting in an 'Oops' (null-ptr-deref), e.g. when the current task is exiting, as spotted by syzbot [1] using acct(2). The 'net' structure can be obtained from the table->data using container_of(). Note that table->data could also be used directly, but that would increase the size of this fix, while 'sctp.ctl_sock' still needs to be retrieved from 'net' structure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 046c052b475e7119b6a30e3483e2888fc606a2f8 to < 0a0966312ac3eedd7f5f2a766ed4702df39a9a65affected
  • 046c052b475e7119b6a30e3483e2888fc606a2f8 to < e919197fb8616331f5dc81e4c3cc3d12769cb725affected
  • 046c052b475e7119b6a30e3483e2888fc606a2f8 to < 55627918febdf9d71107a1e68d1528dc591c9a15affected
  • 046c052b475e7119b6a30e3483e2888fc606a2f8 to < 5b77d73f3be5102720fb685b9e6900e3500e1096affected
  • 046c052b475e7119b6a30e3483e2888fc606a2f8 to < c10377bbc1972d858eaf0ab366a311b39f8ef1b6affected

Linux Linux

Default version status: affected

  • 5.11affected
  • 0 to < 5.11unaffected
  • 5.15.177 to ≤ 5.15.*unaffected
  • 6.1.125 to ≤ 6.1.*unaffected
  • 6.6.72 to ≤ 6.6.*unaffected
  • 6.12.10 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References