PT-2025-14353 · Linux+5 · Linux Kernel+5

Published 2025-04-01 · Updated 2026-05-26 · CVE-2025-21972

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel's network stack has been identified, related to the reassembly of MCTP packets. The issue arises when the frag list used for reassembly is shared with other packets, leading to incorrect reassembly when packets are cloned and causing a memory leak due to circular references between fragments and their skb shared info. This problem can be triggered by the upcoming MCTP-over-USB driver, which uses skb clone, unlike other MCTP drivers that do not share SKBs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2025-21972

ECHO-8D54-6D8A-8669

OESA-2025-1572

OESA-2025-1573

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01707-1

SUSE-SU-2025:01614-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20206-1

SUSE-SU-2025:20270-1

SUSE-SU-2025:20283-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1791

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21972.json · Exploit
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-37936 · Security Note
• https://ubuntu.com/security/CVE-2025-21917 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22010 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-58096 · Security Note
• https://ubuntu.com/security/CVE-2025-38477 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21915 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21922 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22044 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21956 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22065 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22027 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-21972 · Vendor Advisory
• https://git.kernel.org/stable/c/f5d83cf0eeb90fade4d5c4d17d24b8bee9ceeecc · Patch