Threats tagged 'ghsa-2x4f-r6q9-v77h'

CVE-2025-21681 is a medium severity vulnerability in the Linux kernel's openvswitch component. It involves a lockup condition triggered during packet transmission to a network device that is unregistering but still reports carrier status as active. The flaw causes an infinite loop in the skb_tx_hash function, leading to a kernel hang requiring a reboot to recover. The issue arises because some devices, such as net/dummy, do not clear carrier status properly during unregistering. The fix involves checking both the running and carrier states of the device before transmitting packets.