PT-2025-13221 · Linux+4 · Linux Kernel+4
Published
2025-02-20
·
Updated
2026-04-20
·
CVE-2025-21884
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue concerns the lifetime of kernel sockets in the Linux kernel. When kernel sockets are dismantled during the exit of pernet operations, their freeing can be delayed due to any tx packets still held in qdisc or device queues. This triggers a warning from ref tracker dir exit. To fix this, a reference on net->passive is ensured for kernel sockets. A helper, sk net refcnt upgrade, is added for when a kernel socket is converted to a refcounted one.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu