CVE-2025-21735

Summary

CVE-2025-21735 is a newly identified vulnerability affecting the Linux kernel. This issue lies in the Near Field Communication (NFC) subsystem, specifically in the function nci_hci_create_pipe(). Here, a u8 variable referred to as "pipe" from an external network source is not subjected to appropriate bounds checking. Consequently, if the value exceeds 127, memory corruption occurs in the function nci_hci_connect_gate(). This vulnerability can potentially be exploited to execute arbitrary code or cause denial-of-service conditions. System administrators are advised to apply the relevant patch or update their Linux kernel to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.