VULNERABILITY INTELLIGENCE
CVE-2025-21972
CVSS score8.8 HIGH
EPSS probability0.32%
CISA KEVNot currently listed
Published2025-04-01
Last modified2026-10-30
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: net: mctp: unshare packets when reassembling Ensure that the frag_list used for reassembly isn't shared with other packets. This avoids incorrect reassembly when packets are cloned, and prevents a memory leak due to circular references between fragments and their skb_shared_info. The upcoming MCTP-over-USB driver uses skb_clone which can trigger the problem - other MCTP drivers don't share SKBs. A kunit test is added to reproduce the issue.
Weakness classification
- nvd@nist.gov: CWE-401