THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-21638 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: auth_enable: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: gett

[NVD] CVE-2025-21638 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: auth_enable: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: gett

lownvdPublished 2025-01-19

CVE-2025-21638 CVSS: 7.1 HIGH Published: 2025-01-19T11:15:09.317

In the Linux kernel, the following vulnerability has been resolved:

sctp: sysctl: auth_enable: avoid using current->nsproxy

As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:

- Inconsistency: getting info from the reader's/writer's netns vs only fr

Indicators of compromise

CVE-2025-21638cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-21638