Threats tagged 'ghsa-5qmp-w6rv-24wf'

CVE-2025-21812 is a high-severity use-after-free vulnerability in the Linux kernel's ax25 networking code. It involves a locking dependency issue between sk_lock-AF_AX25 and rtnl_mutex locks, which can lead to deadlocks and potential memory corruption. The issue was identified by syzbot and relates to improper protection of the dev->ax25_ptr pointer. The vulnerability has been resolved by removing the ax25 RTNL dependency in ax25_setsockopt().