THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2025-21640 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency:

[NVD] CVE-2025-21640 (HIGH 7.1) — In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency:

lownvdPublished 2025-01-19

CVE-2025-21640 CVSS: 7.1 HIGH Published: 2025-01-19T11:15:09.537

In the Linux kernel, the following vulnerability has been resolved:

sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy

As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons:

- Inconsistency: getting info from the reader's/writer's netns vs only

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-21640