THREAT OPS › Threat News › [NVD] CVE-2025-21677 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved:
pfcp: Destroy device along with udp socket's netns dismantle.
pfcp_newlink() links the device to a list in dev_net(dev) instead
of net, where a udp tunnel socket is created.
Even when net is removed, the devic
[NVD] CVE-2025-21677 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcp_newlink() links the device to a list in dev_net(dev) instead of net, where a udp tunnel socket is created. Even when net is removed, the devic
CVE-2025-21677 CVSS: 7.8 HIGH Published: 2025-01-31T12:15:28.877
In the Linux kernel, the following vulnerability has been resolved:
pfcp: Destroy device along with udp socket's netns dismantle.
pfcp_newlink() links the device to a list in dev_net(dev) instead of net, where a udp tunnel socket is created.
Even when net is removed, the device stays alive on dev_net(dev). Then, removing net trig
Indicators of compromise
- CVE-2025-21677cve
- rel-1.16.0-0-gd239552ce722-prebuilt.qemu.orgdomain
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-21677