Threats tagged 'ghsa-p79h-jcrm-6qrc'

CVE-2025-21920 is a vulnerability in the Linux kernel VLAN implementation where VLAN devices can be created on non-ethernet devices. This leads to an out-of-bounds read due to improper handling of multicast address lengths, causing a kernel function address leak to user mode. The issue arises because the underlying device's address length is used incorrectly during multicast address addition. The vulnerability has a CVSS score of 7.1, indicating high severity.