PT-2025-43393 · Linux+1 · Linux Kernel+1

Published 2025-10-22 · Updated 2025-11-18 · CVE-2025-24934

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions versions prior to kernel release containing the fix (affected versions not specified)

Description A flaw exists where the kernel does not properly validate the connection state of sockets when adding them to load-balancing groups created using the SO REUSEPORT LB socket option. This allows connected sockets to receive packets from any source address, violating the expected behavior that connected sockets should only receive packets from the host they are connected to. This behavior can lead to potential spoofing attacks. The SO REUSEPORT LB option, set via setsockopt(2), enables multiple TCP or UDP sockets to bind to the same socket address, forming a load-balancing group to improve scalability. The issue arises because the kernel incorrectly matches sockets in a load-balancing group, even if they are already connected, when determining the destination socket for incoming packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-488

Related Identifiers

CVE-2025-24934

FREEBSD-SA-25_09

Affected Products

Freebsd

Linux Kernel

References · 7

• https://security.freebsd.org/advisories/FreeBSD-SA-25:09.netinet.asc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24934 · Security Note
• https://usenix.org/system/files/conference/usenixsecurity26/sec26_prepub_ben-simhon.pdf · Note
• https://freebsd.org/security/advisories/FreeBSD-SA-25:09.netinet.asc · Note
• https://t.me/cveNotify/139922 · Telegram Post
• https://twitter.com/CVEnew/status/1990786256142311881 · Twitter Post
• https://t.me/CVEtracker/35510 · Telegram Post