[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-21867":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":80,"related":81,"reserved_at":9,"published_at":94,"modified_at":95,"state":96,"summary":97,"references_raw":106,"kevs":133,"epss":134,"epss_history":137,"metrics":410,"affected":418},"CVE-2025-21867","In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()\n\nKMSAN reported a use-after-free issue in eth_skb_pkt_type()[1]. The\ncause of the issue was that eth_skb_pkt_type() accessed skb's data\nthat didn't contain an Ethernet header. This occurs when\nbpf_prog_test_run_xdp() passes an invalid value as the user_data\nargument to bpf_test_init().\n\nFix this by returning an error when user_data is less than ETH_HLEN in\nbpf_test_init(). Additionally, remove the check for \"if (user_size >\nsize)\" as it is unnecessary.\n\n[1]\nBUG: KMSAN: use-after-free in eth_skb_pkt_type include/linux/etherdevice.h:627 [inline]\nBUG: KMSAN: use-after-free in eth_type_trans+0x4ee/0x980 net/ethernet/eth.c:165\n eth_skb_pkt_type include/linux/etherdevice.h:627 [inline]\n eth_type_trans+0x4ee/0x980 net/ethernet/eth.c:165\n __xdp_build_skb_from_frame+0x5a8/0xa50 net/core/xdp.c:635\n xdp_recv_frames net/bpf/test_run.c:272 [inline]\n xdp_test_run_batch net/bpf/test_run.c:361 [inline]\n bpf_test_run_xdp_live+0x2954/0x3330 net/bpf/test_run.c:390\n bpf_prog_test_run_xdp+0x148e/0x1b10 net/bpf/test_run.c:1318\n bpf_prog_test_run+0x5b7/0xa30 kernel/bpf/syscall.c:4371\n __sys_bpf+0x6a6/0xe20 kernel/bpf/syscall.c:5777\n __do_sys_bpf kernel/bpf/syscall.c:5866 [inline]\n __se_sys_bpf kernel/bpf/syscall.c:5864 [inline]\n __x64_sys_bpf+0xa4/0xf0 kernel/bpf/syscall.c:5864\n x64_sys_call+0x2ea0/0x3d90 arch/x86/include/generated/asm/syscalls_64.h:322\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xd9/0x1d0 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nUninit was created at:\n free_pages_prepare mm/page_alloc.c:1056 [inline]\n free_unref_page+0x156/0x1320 mm/page_alloc.c:2657\n __free_pages+0xa3/0x1b0 mm/page_alloc.c:4838\n bpf_ringbuf_free kernel/bpf/ringbuf.c:226 [inline]\n ringbuf_map_free+0xff/0x1e0 kernel/bpf/ringbuf.c:235\n bpf_map_free kernel/bpf/syscall.c:838 [inline]\n bpf_map_free_deferred+0x17c/0x310 kernel/bpf/syscall.c:862\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa2b/0x1b60 kernel/workqueue.c:3310\n worker_thread+0xedf/0x1550 kernel/workqueue.c:3391\n kthread+0x535/0x6b0 kernel/kthread.c:389\n ret_from_fork+0x6e/0x90 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nCPU: 1 UID: 0 PID: 17276 Comm: syz.1.16450 Not tainted 6.12.0-05490-g9bb88c659673 #8\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78],{"_key":25},"SUSE-SU-2025:01919-1",{"_key":27},"SUSE-SU-2025:01951-1",{"_key":29},"SUSE-SU-2025:01967-1",{"_key":31},"SUSE-SU-2025:01707-1",{"_key":33},"SUSE-SU-2025:01964-1",{"_key":35},"DLA-4193-1",{"_key":37},"DSA-5900-1",{"_key":39},"RHSA-2025:13962",{"_key":41},"RHSA-2025:14009",{"_key":43},"RHSA-2025:14691",{"_key":45},"RHSA-2025:14696",{"_key":47},"SUSE-SU-2025:20343-1",{"_key":49},"SUSE-SU-2025:20344-1",{"_key":51},"SUSE-SU-2025:20354-1",{"_key":53},"SUSE-SU-2025:20355-1",{"_key":55},"SUSE-SU-2025:01614-1",{"_key":57},"UBUNTU-CVE-2025-21867",{"_key":59},"DEBIAN-CVE-2025-21867",{"_key":61},"RHSA-2025:15016",{"_key":63},"RHSA-2023:2458",{"_key":65},"USN-7521-1",{"_key":67},"USN-7521-3",{"_key":69},"USN-7703-1",{"_key":71},"USN-7703-2",{"_key":73},"USN-7703-3",{"_key":75},"USN-7703-4",{"_key":77},"USN-7719-1",{"_key":79},"USN-7737-1",[],[82,83,84,85,87,88,89,90,91,92,93],{"_key":25},{"_key":27},{"_key":29},{"_key":86},"USN-7521-2",{"_key":31},{"_key":33},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},"2025-03-27T13:38:20.673Z","2026-05-11T21:08:03.215Z","Modified",{"cisa_kev":98,"cisa_ransomware":98,"cisa_vendor":9,"epss_severity":99,"epss_score":100,"severity":101,"severity_score":102,"severity_version":103,"severity_source":104,"severity_vector":105,"severity_status":96},false,"low",0.00035,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[107,113,117,121,125,129],{"url":108,"sources":109,"tags":111},"https://git.kernel.org/stable/c/f615fccfc689cb48977d275ac2e391297b52392b",[104,110],"nvd",[112],"Patch",{"url":114,"sources":115,"tags":116},"https://git.kernel.org/stable/c/d56d8a23d95100b65f40438639dd82db2af81c11",[104,110],[112],{"url":118,"sources":119,"tags":120},"https://git.kernel.org/stable/c/972bafed67ca73ad9a56448384281eb5fd5c0ba3",[104,110],[112],{"url":122,"sources":123,"tags":124},"https://git.kernel.org/stable/c/1a9e1284e87d59b1303b69d1808d310821d6e5f7",[104,110],[112],{"url":126,"sources":127,"tags":128},"https://git.kernel.org/stable/c/6b3d638ca897e099fa99bd6d02189d3176f80a47",[104,110],[112],{"url":130,"sources":131,"tags":132},"https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html",[104,110],[],[],{"date":135,"score":100,"percentile":136},"2026-06-03",0.1061,[138,142,145,148,151,154,157,160,163,166,169,172,175,177,180,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,229,232,235,238,241,244,247,250,254,257,260,263,266,269,272,275,278,281,285,288,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,344,347,350,353,356,359,362,365,368,371,374,378,381,384,387,390,393,396,399,402,405,408],{"date":139,"score":140,"percentile":141},"2025-11-04",0.00017,0.02914,{"date":143,"score":140,"percentile":144},"2025-11-05",0.02938,{"date":146,"score":140,"percentile":147},"2025-11-06",0.02965,{"date":149,"score":140,"percentile":150},"2025-11-07",0.02968,{"date":152,"score":140,"percentile":153},"2025-11-08",0.02976,{"date":155,"score":140,"percentile":156},"2025-11-09",0.0298,{"date":158,"score":140,"percentile":159},"2025-11-10",0.02961,{"date":161,"score":140,"percentile":162},"2025-11-11",0.02986,{"date":164,"score":140,"percentile":165},"2025-11-12",0.02999,{"date":167,"score":140,"percentile":168},"2025-11-13",0.03027,{"date":170,"score":140,"percentile":171},"2025-11-14",0.03048,{"date":173,"score":140,"percentile":174},"2025-11-15",0.03075,{"date":176,"score":140,"percentile":174},"2025-11-16",{"date":178,"score":140,"percentile":179},"2025-11-17",0.03062,{"date":181,"score":182,"percentile":183},"2025-11-18",0.00036,0.06047,{"date":185,"score":182,"percentile":186},"2025-11-19",0.06062,{"date":188,"score":182,"percentile":189},"2025-11-20",0.06098,{"date":191,"score":140,"percentile":192},"2025-11-21",0.03148,{"date":194,"score":140,"percentile":195},"2025-11-22",0.03146,{"date":197,"score":140,"percentile":198},"2025-11-23",0.03141,{"date":200,"score":140,"percentile":201},"2025-11-24",0.03129,{"date":203,"score":140,"percentile":204},"2025-11-25",0.03117,{"date":206,"score":140,"percentile":207},"2025-11-26",0.03105,{"date":209,"score":140,"percentile":210},"2025-11-27",0.03107,{"date":212,"score":140,"percentile":213},"2025-11-28",0.0311,{"date":215,"score":140,"percentile":216},"2025-11-29",0.03157,{"date":218,"score":140,"percentile":219},"2025-11-30",0.03276,{"date":221,"score":140,"percentile":222},"2025-12-01",0.03363,{"date":224,"score":140,"percentile":225},"2025-12-02",0.03365,{"date":227,"score":140,"percentile":228},"2025-12-03",0.03368,{"date":230,"score":140,"percentile":231},"2025-12-04",0.03296,{"date":233,"score":140,"percentile":234},"2025-12-05",0.03329,{"date":236,"score":140,"percentile":237},"2025-12-06",0.03346,{"date":239,"score":140,"percentile":240},"2025-12-07",0.03351,{"date":242,"score":140,"percentile":243},"2025-12-08",0.03349,{"date":245,"score":140,"percentile":246},"2025-12-09",0.03375,{"date":248,"score":140,"percentile":249},"2025-12-10",0.03419,{"date":251,"score":252,"percentile":253},"2025-12-11",0.00021,0.04911,{"date":255,"score":252,"percentile":256},"2025-12-12",0.04926,{"date":258,"score":252,"percentile":259},"2025-12-13",0.04964,{"date":261,"score":252,"percentile":262},"2025-12-14",0.04956,{"date":264,"score":252,"percentile":265},"2025-12-15",0.04915,{"date":267,"score":252,"percentile":268},"2025-12-16",0.04914,{"date":270,"score":252,"percentile":271},"2025-12-17",0.04971,{"date":273,"score":252,"percentile":274},"2025-12-18",0.05008,{"date":276,"score":252,"percentile":277},"2025-12-19",0.04994,{"date":279,"score":252,"percentile":280},"2025-12-20",0.04989,{"date":282,"score":283,"percentile":284},"2025-12-21",0.00024,0.05664,{"date":286,"score":283,"percentile":287},"2025-12-22",0.05617,{"date":289,"score":283,"percentile":290},"2025-12-23",0.05628,{"date":292,"score":283,"percentile":293},"2025-12-24",0.05661,{"date":295,"score":283,"percentile":296},"2025-12-25",0.05696,{"date":298,"score":283,"percentile":299},"2025-12-26",0.0569,{"date":301,"score":283,"percentile":302},"2025-12-27",0.05687,{"date":304,"score":283,"percentile":305},"2025-12-28",0.05681,{"date":307,"score":283,"percentile":308},"2025-12-29",0.05667,{"date":310,"score":283,"percentile":311},"2025-12-30",0.05654,{"date":313,"score":283,"percentile":314},"2025-12-31",0.05689,{"date":316,"score":283,"percentile":317},"2026-01-01",0.05765,{"date":319,"score":283,"percentile":320},"2026-01-02",0.05763,{"date":322,"score":283,"percentile":323},"2026-01-03",0.05725,{"date":325,"score":283,"percentile":326},"2026-01-04",0.05625,{"date":328,"score":283,"percentile":329},"2026-01-05",0.0559,{"date":331,"score":283,"percentile":332},"2026-01-06",0.05587,{"date":334,"score":283,"percentile":335},"2026-01-07",0.0561,{"date":337,"score":283,"percentile":338},"2026-01-08",0.05674,{"date":340,"score":283,"percentile":341},"2026-01-09",0.05672,{"date":343,"score":283,"percentile":338},"2026-01-10",{"date":345,"score":283,"percentile":346},"2026-01-11",0.05673,{"date":348,"score":283,"percentile":349},"2026-01-12",0.05655,{"date":351,"score":283,"percentile":352},"2026-01-13",0.05643,{"date":354,"score":283,"percentile":355},"2026-01-14",0.05685,{"date":357,"score":283,"percentile":358},"2026-01-15",0.05677,{"date":360,"score":283,"percentile":361},"2026-01-16",0.05682,{"date":363,"score":283,"percentile":364},"2026-01-17",0.05686,{"date":366,"score":283,"percentile":367},"2026-01-18",0.0568,{"date":369,"score":283,"percentile":370},"2026-01-19",0.0564,{"date":372,"score":283,"percentile":373},"2026-01-20",0.05614,{"date":375,"score":376,"percentile":377},"2026-01-21",0.00063,0.19927,{"date":379,"score":376,"percentile":380},"2026-01-22",0.19872,{"date":382,"score":376,"percentile":383},"2026-01-23",0.19969,{"date":385,"score":376,"percentile":386},"2026-01-24",0.19996,{"date":388,"score":376,"percentile":389},"2026-01-25",0.19921,{"date":391,"score":376,"percentile":392},"2026-01-26",0.19817,{"date":394,"score":376,"percentile":395},"2026-01-27",0.19811,{"date":397,"score":376,"percentile":398},"2026-01-28",0.1981,{"date":400,"score":376,"percentile":401},"2026-01-29",0.19774,{"date":403,"score":376,"percentile":404},"2026-01-30",0.19783,{"date":406,"score":376,"percentile":407},"2026-01-31",0.19787,{"date":409,"score":376,"percentile":398},"2026-02-01",[411,416],{"source":104,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":412,"cvss_v4_0":9},{"baseScore":102,"baseSeverity":413,"vectorString":105,"impactScore":414,"exploitabilityScore":415},"HIGH",9.8,4.6,{"source":110,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":417,"cvss_v4_0":9},{"baseScore":102,"baseSeverity":413,"vectorString":105,"impactScore":414,"exploitabilityScore":415},[419,445],{"ecosystem":9,"name":420,"vendor":421,"product":421,"cpe_part":422,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":423},"Linux","linux","a",[424,431,434,437,440,443],{"version":425,"is_range":426,"range_type":104,"version_start":427,"version_start_type":428,"version_end":429,"version_end_type":430,"fixed_in":9},">= be3d72a2896cb24090f268dce4aa8a304d40bc23, \u003C f615fccfc689cb48977d275ac2e391297b52392b",true,"be3d72a2896cb24090f268dce4aa8a304d40bc23","including","f615fccfc689cb48977d275ac2e391297b52392b","excluding",{"version":432,"is_range":426,"range_type":104,"version_start":427,"version_start_type":428,"version_end":433,"version_end_type":430,"fixed_in":9},">= be3d72a2896cb24090f268dce4aa8a304d40bc23, \u003C d56d8a23d95100b65f40438639dd82db2af81c11","d56d8a23d95100b65f40438639dd82db2af81c11",{"version":435,"is_range":426,"range_type":104,"version_start":427,"version_start_type":428,"version_end":436,"version_end_type":430,"fixed_in":9},">= be3d72a2896cb24090f268dce4aa8a304d40bc23, \u003C 972bafed67ca73ad9a56448384281eb5fd5c0ba3","972bafed67ca73ad9a56448384281eb5fd5c0ba3",{"version":438,"is_range":426,"range_type":104,"version_start":427,"version_start_type":428,"version_end":439,"version_end_type":430,"fixed_in":9},">= be3d72a2896cb24090f268dce4aa8a304d40bc23, \u003C 1a9e1284e87d59b1303b69d1808d310821d6e5f7","1a9e1284e87d59b1303b69d1808d310821d6e5f7",{"version":441,"is_range":426,"range_type":104,"version_start":427,"version_start_type":428,"version_end":442,"version_end_type":430,"fixed_in":9},">= be3d72a2896cb24090f268dce4aa8a304d40bc23, \u003C 6b3d638ca897e099fa99bd6d02189d3176f80a47","6b3d638ca897e099fa99bd6d02189d3176f80a47",{"version":444,"is_range":98,"range_type":104,"version_start":444,"version_start_type":428,"version_end":444,"version_end_type":428,"fixed_in":9},"5.18",{"ecosystem":9,"name":446,"vendor":421,"product":447,"cpe_part":448,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":449},"linux kernel","linux_kernel","o",[450,454,458,462,466,468,470],{"version":451,"is_range":426,"range_type":452,"version_start":444,"version_start_type":428,"version_end":453,"version_end_type":430,"fixed_in":9},"gte5.18_lt6.1.130","cpe","6.1.130",{"version":455,"is_range":426,"range_type":452,"version_start":456,"version_start_type":428,"version_end":457,"version_end_type":430,"fixed_in":9},"gte6.2_lt6.6.80","6.2","6.6.80",{"version":459,"is_range":426,"range_type":452,"version_start":460,"version_start_type":428,"version_end":461,"version_end_type":430,"fixed_in":9},"gte6.7_lt6.12.17","6.7","6.12.17",{"version":463,"is_range":426,"range_type":452,"version_start":464,"version_start_type":428,"version_end":465,"version_end_type":430,"fixed_in":9},"gte6.13_lt6.13.5","6.13","6.13.5",{"version":467,"is_range":98,"range_type":452,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc1",{"version":469,"is_range":98,"range_type":452,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc2",{"version":471,"is_range":98,"range_type":452,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc3"]