CVE-2025-21938

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-21938
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21938.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-21938
Downstream
Related
Published
2025-04-01T15:41:04Z
Modified
2025-10-17T22:52:32.969267Z
Summary
mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
Details

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix 'scheduling while atomic' in mptcppmnlappendnewlocaladdr

If multiple connection requests attempt to create an implicit mptcp endpoint in parallel, more than one caller may end up in mptcppmnlappendnewlocaladdr because none found the address in localaddrlist during their call to mptcppmnlgetlocalid. In this case, the concurrent newlocaladdr calls may delete the address entry created by the previous caller. These deletes use synchronizercu, but this is not permitted in some of the contexts where this function may be called. During packet recv, the caller may be in a rcu read critical section and have preemption disabled.

An example stack:

BUG: scheduling while atomic: swapper/2/0/0x00000302

Call Trace: <IRQ> dumpstacklvl (lib/dumpstack.c:117 (discriminator 1)) dumpstack (lib/dumpstack.c:124) _schedulebug (kernel/sched/core.c:5943) scheduledebug.constprop.0 (arch/x86/include/asm/preempt.h:33 kernel/sched/core.c:5970) _schedule (arch/x86/include/asm/jumplabel.h:27 include/linux/jumplabel.h:207 kernel/sched/features.h:29 kernel/sched/core.c:6621) schedule (arch/x86/include/asm/preempt.h:84 kernel/sched/core.c:6804 kernel/sched/core.c:6818) scheduletimeout (kernel/time/timer.c:2160) waitforcompletion (kernel/sched/completion.c:96 kernel/sched/completion.c:116 kernel/sched/completion.c:127 kernel/sched/completion.c:148) _waitrcugp (include/linux/rcupdate.h:311 kernel/rcu/update.c:444) synchronizercu (kernel/rcu/tree.c:3609) mptcppmnlappendnewlocaladdr (net/mptcp/pmnetlink.c:966 net/mptcp/pmnetlink.c:1061) mptcppmnlgetlocalid (net/mptcp/pmnetlink.c:1164) mptcppmgetlocalid (net/mptcp/pm.c:420) subflowcheckreq (net/mptcp/subflow.c:98 net/mptcp/subflow.c:213) subflowv4routereq (net/mptcp/subflow.c:305) tcpconnrequest (net/ipv4/tcpinput.c:7216) subflowv4connrequest (net/mptcp/subflow.c:651) tcprcvstateprocess (net/ipv4/tcpinput.c:6709) tcpv4dorcv (net/ipv4/tcpipv4.c:1934) tcpv4rcv (net/ipv4/tcpipv4.c:2334) ipprotocoldeliverrcu (net/ipv4/ipinput.c:205 (discriminator 1)) iplocaldeliverfinish (include/linux/rcupdate.h:813 net/ipv4/ipinput.c:234) iplocaldeliver (include/linux/netfilter.h:314 include/linux/netfilter.h:308 net/ipv4/ipinput.c:254) ipsublistrcvfinish (include/net/dst.h:461 net/ipv4/ipinput.c:580) ipsublistrcv (net/ipv4/ipinput.c:640) iplistrcv (net/ipv4/ipinput.c:675) _netifreceiveskblistcore (net/core/dev.c:5583 net/core/dev.c:5631) netifreceiveskblistinternal (net/core/dev.c:5685 net/core/dev.c:5774) napicompletedone (include/linux/list.h:37 include/net/gro.h:449 include/net/gro.h:444 net/core/dev.c:6114) igbpoll (drivers/net/ethernet/intel/igb/igbmain.c:8244) igb _napipoll (net/core/dev.c:6582) netrxaction (net/core/dev.c:6653 net/core/dev.c:6787) handlesoftirqs (kernel/softirq.c:553) _irqexitrcu (kernel/softirq.c:588 kernel/softirq.c:427 kernel/softirq.c:636) irqexitrcu (kernel/softirq.c:651) common_interrupt (arch/x86/kernel/irq.c:247 (discriminator 14)) </IRQ>

This problem seems particularly prevalent if the user advertises an endpoint that has a different external vs internal address. In the case where the external address is advertised and multiple connections already exist, multiple subflow SYNs arrive in parallel which tends to trigger the race during creation of the first localaddrlist entries which have the internal address instead.

Fix by skipping the replacement of an existing implicit local address if called via mptcppmnlgetlocal_id.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d045b9eb95a9b611c483897a69e7285aefdc66d7
Fixed
f1404f368c40fc6a068dad72e4ee0824ee6a78ee
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d045b9eb95a9b611c483897a69e7285aefdc66d7
Fixed
f3fcdb2de9fdbed9d8c6a8eb2c5fbd7d6f54a4d8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d045b9eb95a9b611c483897a69e7285aefdc66d7
Fixed
4b228dae3d2cc6d9dce167449cd8fa9f028e9376
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d045b9eb95a9b611c483897a69e7285aefdc66d7
Fixed
125ccafe6dd062901b5a0c31ee9038740fc8859e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d045b9eb95a9b611c483897a69e7285aefdc66d7
Fixed
022bfe24aad8937705704ff2e414b100cf0f2e1a

Affected versions

v5.*

v5.17
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.100
v6.1.101
v6.1.102
v6.1.103
v6.1.104
v6.1.105
v6.1.106
v6.1.107
v6.1.108
v6.1.109
v6.1.11
v6.1.110
v6.1.111
v6.1.112
v6.1.113
v6.1.114
v6.1.115
v6.1.116
v6.1.117
v6.1.118
v6.1.119
v6.1.12
v6.1.120
v6.1.121
v6.1.122
v6.1.123
v6.1.124
v6.1.125
v6.1.126
v6.1.127
v6.1.128
v6.1.129
v6.1.13
v6.1.130
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.1.95
v6.1.96
v6.1.97
v6.1.98
v6.1.99
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.2
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.13.1
v6.13.2
v6.13.3
v6.13.4
v6.13.5
v6.13.6
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.52
v6.6.53
v6.6.54
v6.6.55
v6.6.56
v6.6.57
v6.6.58
v6.6.59
v6.6.6
v6.6.60
v6.6.61
v6.6.62
v6.6.63
v6.6.64
v6.6.65
v6.6.66
v6.6.67
v6.6.68
v6.6.69
v6.6.7
v6.6.70
v6.6.71
v6.6.72
v6.6.73
v6.6.74
v6.6.75
v6.6.76
v6.6.77
v6.6.78
v6.6.79
v6.6.8
v6.6.80
v6.6.81
v6.6.82
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7

Database specific

vanir_signatures

[
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-0c43fb43",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@022bfe24aad8937705704ff2e414b100cf0f2e1a",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_add_addr_doit",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "207060244869483060056507148413403057819",
            "length": 1302.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-0c9eef13",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b228dae3d2cc6d9dce167449cd8fa9f028e9376",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_add_addr_doit",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "207060244869483060056507148413403057819",
            "length": 1302.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-1da2b7f0",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b228dae3d2cc6d9dce167449cd8fa9f028e9376",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_append_new_local_addr",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "76444687438077326949648764090935588445",
            "length": 1893.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-2934ecdd",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@125ccafe6dd062901b5a0c31ee9038740fc8859e",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_add_addr_doit",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "207060244869483060056507148413403057819",
            "length": 1302.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21938-39f794f5",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b228dae3d2cc6d9dce167449cd8fa9f028e9376",
        "signature_version": "v1",
        "target": {
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "253240053422894518511730502371707075668",
                "311241550951316717648333801321685560828",
                "28914707877658635909156074281763296168",
                "274407200115104289208607946740232365961",
                "91806704726310517262114403560568552957",
                "326203652982803410424159678957228569138",
                "173110670051635803254249451809984621687",
                "94919993958479980027224632303184695159",
                "282382210162714576187439590859032475080",
                "120697968059967697671633763664224955979",
                "40697934430552204409772738186560125363",
                "38728858048621265881223372134519830135",
                "201148420706602163367328441283639778349",
                "316912899011341752489614161524623085879",
                "67349983020401012985766670545051267094"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-4cf9231b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1404f368c40fc6a068dad72e4ee0824ee6a78ee",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_append_new_local_addr",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "290857337093701656260657976223602291330",
            "length": 1831.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-7270c52b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3fcdb2de9fdbed9d8c6a8eb2c5fbd7d6f54a4d8",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_nl_cmd_add_addr",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "79739095883055837124359479468449946992",
            "length": 1305.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21938-7d8fefe7",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@125ccafe6dd062901b5a0c31ee9038740fc8859e",
        "signature_version": "v1",
        "target": {
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "253240053422894518511730502371707075668",
                "311241550951316717648333801321685560828",
                "28914707877658635909156074281763296168",
                "274407200115104289208607946740232365961",
                "91806704726310517262114403560568552957",
                "326203652982803410424159678957228569138",
                "173110670051635803254249451809984621687",
                "94919993958479980027224632303184695159",
                "282382210162714576187439590859032475080",
                "120697968059967697671633763664224955979",
                "40697934430552204409772738186560125363",
                "38728858048621265881223372134519830135",
                "201148420706602163367328441283639778349",
                "316912899011341752489614161524623085879",
                "67349983020401012985766670545051267094"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-81840bc6",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b228dae3d2cc6d9dce167449cd8fa9f028e9376",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_get_local_id",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "33637632087713145220712678165085438843",
            "length": 679.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-841a485a",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1404f368c40fc6a068dad72e4ee0824ee6a78ee",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_get_local_id",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "33637632087713145220712678165085438843",
            "length": 679.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-874159bd",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@125ccafe6dd062901b5a0c31ee9038740fc8859e",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_get_local_id",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "173125391707576991077875689930388054453",
            "length": 573.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-88fdedc1",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3fcdb2de9fdbed9d8c6a8eb2c5fbd7d6f54a4d8",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_append_new_local_addr",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "76444687438077326949648764090935588445",
            "length": 1893.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-8cd8ccc9",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@125ccafe6dd062901b5a0c31ee9038740fc8859e",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_append_new_local_addr",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "76444687438077326949648764090935588445",
            "length": 1893.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21938-8ff5d379",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3fcdb2de9fdbed9d8c6a8eb2c5fbd7d6f54a4d8",
        "signature_version": "v1",
        "target": {
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "253240053422894518511730502371707075668",
                "311241550951316717648333801321685560828",
                "28914707877658635909156074281763296168",
                "274407200115104289208607946740232365961",
                "91806704726310517262114403560568552957",
                "326203652982803410424159678957228569138",
                "173110670051635803254249451809984621687",
                "94919993958479980027224632303184695159",
                "282382210162714576187439590859032475080",
                "120697968059967697671633763664224955979",
                "40697934430552204409772738186560125363",
                "38728858048621265881223372134519830135",
                "201148420706602163367328441283639778349",
                "316912899011341752489614161524623085879",
                "67349983020401012985766670545051267094"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21938-96c6c83e",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@022bfe24aad8937705704ff2e414b100cf0f2e1a",
        "signature_version": "v1",
        "target": {
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "253240053422894518511730502371707075668",
                "311241550951316717648333801321685560828",
                "28914707877658635909156074281763296168",
                "274407200115104289208607946740232365961",
                "91806704726310517262114403560568552957",
                "326203652982803410424159678957228569138",
                "173110670051635803254249451809984621687",
                "94919993958479980027224632303184695159",
                "282382210162714576187439590859032475080",
                "120697968059967697671633763664224955979",
                "40697934430552204409772738186560125363",
                "38728858048621265881223372134519830135",
                "201148420706602163367328441283639778349",
                "316912899011341752489614161524623085879",
                "67349983020401012985766670545051267094"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21938-a94ebaae",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1404f368c40fc6a068dad72e4ee0824ee6a78ee",
        "signature_version": "v1",
        "target": {
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "253240053422894518511730502371707075668",
                "311241550951316717648333801321685560828",
                "28914707877658635909156074281763296168",
                "274407200115104289208607946740232365961",
                "148153299798641117596266306509148131054",
                "326203652982803410424159678957228569138",
                "173110670051635803254249451809984621687",
                "94919993958479980027224632303184695159",
                "282382210162714576187439590859032475080",
                "120697968059967697671633763664224955979",
                "40697934430552204409772738186560125363",
                "38728858048621265881223372134519830135",
                "201148420706602163367328441283639778349",
                "177361146490029149669039510830600111718",
                "89706011354595557203227546747153863098"
            ]
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-ae10628b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3fcdb2de9fdbed9d8c6a8eb2c5fbd7d6f54a4d8",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_get_local_id",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "33637632087713145220712678165085438843",
            "length": 679.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-beffbc7d",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@022bfe24aad8937705704ff2e414b100cf0f2e1a",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_get_local_id",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "173125391707576991077875689930388054453",
            "length": 573.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-cfe69b32",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@022bfe24aad8937705704ff2e414b100cf0f2e1a",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_pm_nl_append_new_local_addr",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "76444687438077326949648764090935588445",
            "length": 1893.0
        },
        "deprecated": false
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21938-f9a9d941",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f1404f368c40fc6a068dad72e4ee0824ee6a78ee",
        "signature_version": "v1",
        "target": {
            "function": "mptcp_nl_cmd_add_addr",
            "file": "net/mptcp/pm_netlink.c"
        },
        "digest": {
            "function_hash": "95432948499751958725868265915867697768",
            "length": 1285.0
        },
        "deprecated": false
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.1.131
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.83
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.19
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.7