[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-21961":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":86,"related":87,"reserved_at":9,"published_at":98,"modified_at":99,"state":100,"summary":101,"references_raw":110,"kevs":125,"epss":126,"epss_history":129,"metrics":400,"affected":408},"CVE-2025-21961","In the Linux kernel, the following vulnerability has been resolved:\n\neth: bnxt: fix truesize for mb-xdp-pass case\n\nWhen mb-xdp is set and return is XDP_PASS, packet is converted from\nxdp_buff to sk_buff with xdp_update_skb_shared_info() in\nbnxt_xdp_build_skb().\nbnxt_xdp_build_skb() passes incorrect truesize argument to\nxdp_update_skb_shared_info().\nThe truesize is calculated as BNXT_RX_PAGE_SIZE * sinfo->nr_frags but\nthe skb_shared_info was wiped by napi_build_skb() before.\nSo it stores sinfo->nr_frags before bnxt_xdp_build_skb() and use it\ninstead of getting skb_shared_info from xdp_get_shared_info_from_buff().\n\nSplat looks like:\n ------------[ cut here ]------------\n WARNING: CPU: 2 PID: 0 at net/core/skbuff.c:6072 skb_try_coalesce+0x504/0x590\n Modules linked in: xt_nat xt_tcpudp veth af_packet xt_conntrack nft_chain_nat xt_MASQUERADE nf_conntrack_netlink xfrm_user xt_addrtype nft_coms\n CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted 6.14.0-rc2+ #3\n RIP: 0010:skb_try_coalesce+0x504/0x590\n Code: 4b fd ff ff 49 8b 34 24 40 80 e6 40 0f 84 3d fd ff ff 49 8b 74 24 48 40 f6 c6 01 0f 84 2e fd ff ff 48 8d 4e ff e9 25 fd ff ff \u003C0f> 0b e99\n RSP: 0018:ffffb62c4120caa8 EFLAGS: 00010287\n RAX: 0000000000000003 RBX: ffffb62c4120cb14 RCX: 0000000000000ec0\n RDX: 0000000000001000 RSI: ffffa06e5d7dc000 RDI: 0000000000000003\n RBP: ffffa06e5d7ddec0 R08: ffffa06e6120a800 R09: ffffa06e7a119900\n R10: 0000000000002310 R11: ffffa06e5d7dcec0 R12: ffffe4360575f740\n R13: ffffe43600000000 R14: 0000000000000002 R15: 0000000000000002\n FS:  0000000000000000(0000) GS:ffffa0755f700000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007f147b76b0f8 CR3: 00000001615d4000 CR4: 00000000007506f0\n PKRU: 55555554\n Call Trace:\n  \u003CIRQ>\n  ? __warn+0x84/0x130\n  ? skb_try_coalesce+0x504/0x590\n  ? report_bug+0x18a/0x1a0\n  ? handle_bug+0x53/0x90\n  ? exc_invalid_op+0x14/0x70\n  ? asm_exc_invalid_op+0x16/0x20\n  ? skb_try_coalesce+0x504/0x590\n  inet_frag_reasm_finish+0x11f/0x2e0\n  ip_defrag+0x37a/0x900\n  ip_local_deliver+0x51/0x120\n  ip_sublist_rcv_finish+0x64/0x70\n  ip_sublist_rcv+0x179/0x210\n  ip_list_rcv+0xf9/0x130\n\nHow to reproduce:\n\u003CNode A>\nip link set $interface1 xdp obj xdp_pass.o\nip link set $interface1 mtu 9000 up\nip a a 10.0.0.1/24 dev $interface1\n\u003CNode B>\nip link set $interfac2 mtu 9000 up\nip a a 10.0.0.2/24 dev $interface2\nping 10.0.0.1 -s 65000\n\nFollowing ping.py patch adds xdp-mb-pass case. so ping.py is going to be\nable to reproduce this issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],[],[],[],[22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84],{"_key":23},"SUSE-SU-2025:01919-1",{"_key":25},"SUSE-SU-2025:01951-1",{"_key":27},"SUSE-SU-2025:01967-1",{"_key":29},"SUSE-SU-2025:01707-1",{"_key":31},"SUSE-SU-2025:01964-1",{"_key":33},"RHSA-2025:9896",{"_key":35},"SUSE-SU-2025:20192-1",{"_key":37},"SUSE-SU-2025:20206-1",{"_key":39},"SUSE-SU-2025:20270-1",{"_key":41},"SUSE-SU-2025:20283-1",{"_key":43},"SUSE-SU-2025:01614-1",{"_key":45},"UBUNTU-CVE-2025-21961",{"_key":47},"DEBIAN-CVE-2025-21961",{"_key":49},"RHSA-2025:9080",{"_key":51},"USN-7605-1",{"_key":53},"USN-7605-2",{"_key":55},"USN-7606-1",{"_key":57},"USN-7628-1",{"_key":59},"USN-7764-1",{"_key":61},"USN-7764-2",{"_key":63},"USN-7765-1",{"_key":65},"USN-7766-1",{"_key":67},"USN-7767-1",{"_key":69},"USN-7767-2",{"_key":71},"USN-7779-1",{"_key":73},"USN-7790-1",{"_key":75},"USN-7800-1",{"_key":77},"USN-7801-1",{"_key":79},"USN-7801-2",{"_key":81},"USN-7801-3",{"_key":83},"USN-7802-1",{"_key":85},"USN-7809-1",[],[88,89,90,91,92,93,94,95,96,97],{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},"2025-04-01T15:46:58.795Z","2026-05-11T21:09:53.613Z","Modified",{"cisa_kev":102,"cisa_ransomware":102,"cisa_vendor":9,"epss_severity":103,"epss_score":104,"severity":105,"severity_score":106,"severity_version":107,"severity_source":108,"severity_vector":109,"severity_status":100},false,"low",0.00014,"medium",5.5,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[111,117,121],{"url":112,"sources":113,"tags":115},"https://git.kernel.org/stable/c/19107e71be330dbccb9f8f9f4cf0a9abeadad802",[108,114],"nvd",[116],"Patch",{"url":118,"sources":119,"tags":120},"https://git.kernel.org/stable/c/b4679807c6083ade4d47f03f80da891afcb6ef62",[108,114],[116],{"url":122,"sources":123,"tags":124},"https://git.kernel.org/stable/c/9f7b2aa5034e24d3c49db73d5f760c0435fe31c2",[108,114],[116],[],{"date":127,"score":104,"percentile":128},"2026-06-04",0.02899,[130,134,137,140,143,146,149,152,155,157,160,163,166,169,172,176,179,182,185,188,191,194,197,200,202,205,208,210,213,216,218,221,224,227,230,233,236,239,242,245,248,251,254,258,261,264,267,270,273,276,279,282,285,289,292,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340,343,346,349,352,355,358,361,364,367,370,373,376,379,383,386,389,391,394,397],{"date":131,"score":132,"percentile":133},"2025-11-04",0.00013,0.01502,{"date":135,"score":132,"percentile":136},"2025-11-05",0.01527,{"date":138,"score":132,"percentile":139},"2025-11-06",0.01544,{"date":141,"score":132,"percentile":142},"2025-11-07",0.01549,{"date":144,"score":132,"percentile":145},"2025-11-08",0.01555,{"date":147,"score":132,"percentile":148},"2025-11-09",0.01553,{"date":150,"score":132,"percentile":151},"2025-11-10",0.01533,{"date":153,"score":132,"percentile":154},"2025-11-11",0.01545,{"date":156,"score":132,"percentile":145},"2025-11-12",{"date":158,"score":132,"percentile":159},"2025-11-13",0.01569,{"date":161,"score":132,"percentile":162},"2025-11-14",0.01571,{"date":164,"score":132,"percentile":165},"2025-11-15",0.01593,{"date":167,"score":132,"percentile":168},"2025-11-16",0.01596,{"date":170,"score":132,"percentile":171},"2025-11-17",0.01582,{"date":173,"score":174,"percentile":175},"2025-11-18",0.00027,0.03951,{"date":177,"score":174,"percentile":178},"2025-11-19",0.03998,{"date":180,"score":174,"percentile":181},"2025-11-20",0.04061,{"date":183,"score":132,"percentile":184},"2025-11-21",0.01644,{"date":186,"score":132,"percentile":187},"2025-11-22",0.01642,{"date":189,"score":132,"percentile":190},"2025-11-23",0.01633,{"date":192,"score":132,"percentile":193},"2025-11-24",0.0163,{"date":195,"score":132,"percentile":196},"2025-11-25",0.01624,{"date":198,"score":132,"percentile":199},"2025-11-26",0.01579,{"date":201,"score":132,"percentile":199},"2025-11-27",{"date":203,"score":132,"percentile":204},"2025-11-28",0.01576,{"date":206,"score":132,"percentile":207},"2025-11-29",0.01617,{"date":209,"score":132,"percentile":196},"2025-11-30",{"date":211,"score":132,"percentile":212},"2025-12-01",0.0165,{"date":214,"score":132,"percentile":215},"2025-12-02",0.01647,{"date":217,"score":132,"percentile":212},"2025-12-03",{"date":219,"score":132,"percentile":220},"2025-12-04",0.01621,{"date":222,"score":132,"percentile":223},"2025-12-05",0.01709,{"date":225,"score":132,"percentile":226},"2025-12-06",0.0171,{"date":228,"score":132,"percentile":229},"2025-12-07",0.01705,{"date":231,"score":132,"percentile":232},"2025-12-08",0.01707,{"date":234,"score":132,"percentile":235},"2025-12-09",0.01724,{"date":237,"score":132,"percentile":238},"2025-12-10",0.01739,{"date":240,"score":132,"percentile":241},"2025-12-11",0.0173,{"date":243,"score":132,"percentile":244},"2025-12-12",0.01736,{"date":246,"score":132,"percentile":247},"2025-12-13",0.01718,{"date":249,"score":132,"percentile":250},"2025-12-14",0.01717,{"date":252,"score":132,"percentile":253},"2025-12-15",0.01711,{"date":255,"score":256,"percentile":257},"2025-12-16",0.00017,0.03008,{"date":259,"score":256,"percentile":260},"2025-12-17",0.03024,{"date":262,"score":256,"percentile":263},"2025-12-18",0.03031,{"date":265,"score":256,"percentile":266},"2025-12-19",0.0303,{"date":268,"score":256,"percentile":269},"2025-12-20",0.03026,{"date":271,"score":256,"percentile":272},"2025-12-21",0.03038,{"date":274,"score":256,"percentile":275},"2025-12-22",0.03035,{"date":277,"score":256,"percentile":278},"2025-12-23",0.03044,{"date":280,"score":256,"percentile":281},"2025-12-24",0.03045,{"date":283,"score":256,"percentile":284},"2025-12-25",0.0305,{"date":286,"score":287,"percentile":288},"2025-12-26",0.00018,0.04024,{"date":290,"score":287,"percentile":291},"2025-12-27",0.04036,{"date":293,"score":287,"percentile":294},"2025-12-28",0.0403,{"date":296,"score":287,"percentile":297},"2025-12-29",0.04021,{"date":299,"score":287,"percentile":300},"2025-12-30",0.03965,{"date":302,"score":287,"percentile":303},"2025-12-31",0.0398,{"date":305,"score":287,"percentile":306},"2026-01-01",0.04066,{"date":308,"score":287,"percentile":309},"2026-01-02",0.04063,{"date":311,"score":287,"percentile":312},"2026-01-03",0.04051,{"date":314,"score":287,"percentile":315},"2026-01-04",0.03942,{"date":317,"score":287,"percentile":318},"2026-01-05",0.03905,{"date":320,"score":287,"percentile":321},"2026-01-06",0.03897,{"date":323,"score":287,"percentile":324},"2026-01-07",0.03922,{"date":326,"score":287,"percentile":327},"2026-01-08",0.03956,{"date":329,"score":287,"percentile":330},"2026-01-09",0.03957,{"date":332,"score":287,"percentile":333},"2026-01-10",0.03966,{"date":335,"score":287,"percentile":336},"2026-01-11",0.03941,{"date":338,"score":287,"percentile":339},"2026-01-12",0.03953,{"date":341,"score":287,"percentile":342},"2026-01-13",0.03945,{"date":344,"score":287,"percentile":345},"2026-01-14",0.03982,{"date":347,"score":287,"percentile":348},"2026-01-15",0.03908,{"date":350,"score":287,"percentile":351},"2026-01-16",0.03909,{"date":353,"score":287,"percentile":354},"2026-01-17",0.0391,{"date":356,"score":287,"percentile":357},"2026-01-18",0.03886,{"date":359,"score":287,"percentile":360},"2026-01-19",0.03841,{"date":362,"score":287,"percentile":363},"2026-01-20",0.03811,{"date":365,"score":287,"percentile":366},"2026-01-21",0.038,{"date":368,"score":287,"percentile":369},"2026-01-22",0.03806,{"date":371,"score":287,"percentile":372},"2026-01-23",0.03852,{"date":374,"score":287,"percentile":375},"2026-01-24",0.03884,{"date":377,"score":287,"percentile":378},"2026-01-25",0.03871,{"date":380,"score":381,"percentile":382},"2026-01-26",0.00049,0.15225,{"date":384,"score":381,"percentile":385},"2026-01-27",0.15221,{"date":387,"score":381,"percentile":388},"2026-01-28",0.15233,{"date":390,"score":381,"percentile":385},"2026-01-29",{"date":392,"score":381,"percentile":393},"2026-01-30",0.15212,{"date":395,"score":381,"percentile":396},"2026-01-31",0.15231,{"date":398,"score":381,"percentile":399},"2026-02-01",0.15211,[401,406],{"source":108,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":402,"cvss_v4_0":9},{"baseScore":106,"baseSeverity":403,"vectorString":109,"impactScore":404,"exploitabilityScore":405},"MEDIUM",6,4.6,{"source":114,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":407,"cvss_v4_0":9},{"baseScore":106,"baseSeverity":403,"vectorString":109,"impactScore":404,"exploitabilityScore":405},[409,429],{"ecosystem":9,"name":410,"vendor":411,"product":411,"cpe_part":412,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":413},"Linux","linux","a",[414,421,424,427],{"version":415,"is_range":416,"range_type":108,"version_start":417,"version_start_type":418,"version_end":419,"version_end_type":420,"fixed_in":9},">= 1dc4c557bfedfcdf7fc0c46795857773b7ad66e7, \u003C 19107e71be330dbccb9f8f9f4cf0a9abeadad802",true,"1dc4c557bfedfcdf7fc0c46795857773b7ad66e7","including","19107e71be330dbccb9f8f9f4cf0a9abeadad802","excluding",{"version":422,"is_range":416,"range_type":108,"version_start":417,"version_start_type":418,"version_end":423,"version_end_type":420,"fixed_in":9},">= 1dc4c557bfedfcdf7fc0c46795857773b7ad66e7, \u003C b4679807c6083ade4d47f03f80da891afcb6ef62","b4679807c6083ade4d47f03f80da891afcb6ef62",{"version":425,"is_range":416,"range_type":108,"version_start":417,"version_start_type":418,"version_end":426,"version_end_type":420,"fixed_in":9},">= 1dc4c557bfedfcdf7fc0c46795857773b7ad66e7, \u003C 9f7b2aa5034e24d3c49db73d5f760c0435fe31c2","9f7b2aa5034e24d3c49db73d5f760c0435fe31c2",{"version":428,"is_range":102,"range_type":108,"version_start":428,"version_start_type":418,"version_end":428,"version_end_type":418,"fixed_in":9},"5.19",{"ecosystem":9,"name":430,"vendor":411,"product":431,"cpe_part":432,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":433},"linux kernel","linux_kernel","o",[434,438,442,444,446,448,450,452],{"version":435,"is_range":416,"range_type":436,"version_start":428,"version_start_type":418,"version_end":437,"version_end_type":420,"fixed_in":9},"gte5.19_lt6.12.20","cpe","6.12.20",{"version":439,"is_range":416,"range_type":436,"version_start":440,"version_start_type":418,"version_end":441,"version_end_type":420,"fixed_in":9},"gte6.13_lt6.13.8","6.13","6.13.8",{"version":443,"is_range":102,"range_type":436,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc1",{"version":445,"is_range":102,"range_type":436,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc2",{"version":447,"is_range":102,"range_type":436,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc3",{"version":449,"is_range":102,"range_type":436,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc4",{"version":451,"is_range":102,"range_type":436,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc5",{"version":453,"is_range":102,"range_type":436,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc6"]