THREAT OPS › Threat News › [NVD] CVE-2025-21637 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: udp_port: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net'
structure via 'current' is not recommended for different reasons:
- Inconsistency: getting
[NVD] CVE-2025-21637 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udp_port: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting
CVE-2025-21637 CVSS: 7.1 HIGH Published: 2025-01-19T11:15:09.217
In the Linux kernel, the following vulnerability has been resolved:
sctp: sysctl: udp_port: avoid using current->nsproxy
As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:
- Inconsistency: getting info from the reader's/writer's netns vs only from
Indicators of compromise
- CVE-2025-21637cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-21637