PT-2025-14277 · Linux+1 · Linux Kernel+1

Published 2025-02-11 · Updated 2025-04-02 · CVE-2025-21896

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue was related to the use of folio readahead code, which dropped the reference on the folio once it was locked. This caused a problem in the case of splice pipe responses where the old folio is removed and the new folio is spliced in. The vulnerability allowed for a use-after-free (UAF) bug.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Use After Free

Weakness Enumeration

CWE-200

CWE-416

Related Identifiers

BDU:2025-04406

CVE-2025-21896

Affected Products

Astra Linux

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21896.json · Exploit
• https://ubuntu.com/security/CVE-2025-21896 · Vendor Advisory
• https://git.kernel.org/stable/c/0c67c37e1710b2a8f61c8a02db95a51fe577e2c1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-21896 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-21896 · Vendor Advisory
• https://git.kernel.org/stable/c/60db11f1b7fba4a66b117ea998d965818784a98d · Patch
• https://bdu.fstec.ru/vul/2025-04406 · Security Note
• https://osv.dev/vulnerability/CVE-2025-21896 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-21896 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-21896 · Vendor Advisory
• https://lore.kernel.org/linux-cve-announce/2025040132-CVE-2025-21896-395c@gregkh · Note
• https://git.kernel.org/linus/0c67c37e1710b2a8f61c8a02db95a51fe577e2c1 · Note
• https://twitter.com/CVEnew/status/1907339913235763485 · Twitter Post
• https://vuldb.com/ru/?id.302619 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note