PT-2025-13212 · Linux+6 · Linux Kernel+6

Published 2024-10-21 · Updated 2026-04-20 · CVE-2025-21875

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf

Description A vulnerability has been resolved in the Linux kernel related to the MultiPath TCP (MPTCP) protocol. The issue arises when the PM control path attempts to send a RM ADDR notification over a socket without acquiring the necessary lock, potentially leading to a lockdep splat. This problem is a result of an early optimization that incorrectly assumes no subflows are present, allowing another process to interfere without proper locking.

Recommendations For Linux kernel versions prior to 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf, update to a newer version that includes the fix for this issue. As a temporary workaround, consider restricting access to the MPTCP protocol to minimize the risk of exploitation.

Exploit

Fix

Memory Leak

Improper Locking

Weakness Enumeration

CWE-401

CWE-667

Related Identifiers

BDU:2025-03809

BDU:2025-04511

CVE-2025-21875

DLA-4178-1

DLA-4193-1

DSA-5900-1

ECHO-BCE9-66C4-6EDF

OESA-2025-1869

OESA-2025-1874

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01707-1

SUSE-SU-2025:01614-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20206-1

SUSE-SU-2025:20270-1

SUSE-SU-2025:20283-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

USN-7510-1

USN-7510-2

USN-7510-3

USN-7510-4

USN-7510-5

USN-7510-6

USN-7510-7

USN-7510-8

USN-7511-1

USN-7511-2

USN-7511-3

USN-7512-1

USN-7521-1

USN-7521-2

USN-7521-3

USN-7593-1

USN-7602-1

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2018

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21875.json · Exploit
• https://git.kernel.org/stable/c/7cca31035c05819643ffb5d7518e9a331b3f6651 · Patch
• https://ubuntu.com/security/CVE-2024-57997 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7764-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21871 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38279 · Security Note
• https://osv.dev/vulnerability/USN-7593-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21864 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21978 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7800-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46821 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21820 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-8805 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7764-1 · Vendor Advisory