PT-2025-8901 · Linux+2 · Linux Kernel+2

Published 2025-02-13 · Updated 2025-10-03 · CVE-2025-21789

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically related to out-of-bounds access in IP checksum code for negative lengths on LoongArch and ARM64 architectures. The issue was caused by an undefined shift and an out-of-bounds read, introduced by a commit adding checksum optimization for 64-bit systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2025-12647

AZL-57896

BDU:2025-11877

CVE-2025-21789

OESA-2025-1285

OESA-2025-1286

Affected Products

Alt Linux

Astra Linux

Linux Kernel

References · 109

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21789.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-53156 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21729 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-56539 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21782 · Security Note
• https://git.kernel.org/stable/c/964a8895704a22efc06a2a3276b624a5ae985a06 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-56573 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-56651 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-56579 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-21789 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1285 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56689 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-53233 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21814 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1286 · Vendor Advisory