CVE-2025-21683
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jan 31, 2025
Updated: Feb 3, 2025
CWE ID 401
Summary
CVE-2025-21683: A memory leak vulnerability has been identified and addressed in the Linux kernel. This issue stems from the bpf subsystem, specifically in the function bpf_sk_select_reuseport(). If a TCP socket with SO_ATTACH_REUSEPORT_EBPF set before establishment is encountered, the socket reference is not dropped properly, leading to a memory leak. This vulnerability can potentially result in memory exhaustion and system instability. The affected component can be found in comm "test_progs" with PID 44109.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.