THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-21659 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at the

[NVD] CVE-2025-21659 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at the

lownvdPublished 2025-01-21

CVE-2025-21659 CVSS: 8.1 HIGH Published: 2025-01-21T13:15:09.540

In the Linux kernel, the following vulnerability has been resolved:

netdev: prevent accessing NAPI instances from another namespace

The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at the very least NAPI instance belongs to the same netns as

Indicators of compromise

CVE-2025-21659cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-21659