THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-21678 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: gtp: Destroy device along with udp socket's netns dismantle. gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created. Even when src_net is removed, the

[NVD] CVE-2025-21678 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: gtp: Destroy device along with udp socket's netns dismantle. gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created. Even when src_net is removed, the

lownvdPublished 2025-01-31

CVE-2025-21678 CVSS: 7.8 HIGH Published: 2025-01-31T12:15:28.970

In the Linux kernel, the following vulnerability has been resolved:

gtp: Destroy device along with udp socket's netns dismantle.

gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.

Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing sr

Indicators of compromise

CVE-2025-21678cve
rel-1.16.0-0-gd239552ce722-prebuilt.qemu.orgdomain

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-21678