PT-2025-14301 · Linux+10 · Linux Kernel+10
Published
2025-03-03
·
Updated
2026-04-20
·
CVE-2025-21920
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A bug in the Linux kernel allows VLAN devices to be created on top of non-ethernet devices, which can cause an out-of-bounds read and leak the address of a kernel function to usermode. This occurs when initializing GARP and MRP for the underlying device, as the multicast address of each applicant is added to the underlying device using dev mc add, which uses dev->addr len to determine the length of the new multicast address. If dev->addr len is greater than 6, this causes an out-of-bounds read since the multicast addresses provided by GARP and MRP are only 6 bytes long.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Out of bounds Read
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu