[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2025-21636":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":31,"references":33,"score":40,"epss_score":41,"epss_percentile":42,"is_kev":20,"cisa_kev_date_added":43,"cisa_kev_due_date":43,"cisa_ssvc":44,"attack_mappings":54,"exploits":61},96586,"CVE-2025-21636","EUVD-2025-2585","In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy\n\nAs mentioned in a previous commit of this series, using the 'net'\nstructure via 'current' is not recommended for different reasons:\n\n- Inconsistency: getting info from the reader's\u002Fwriter's netns vs only\n  from the opener's netns.\n\n- current->nsproxy can be NULL in some cases, resulting in an 'Oops'\n  (null-ptr-deref), e.g. when the current task is exiting, as spotted by\n  syzbot [1] using acct(2).\n\nThe 'net' structure can be obtained from the table->data using\ncontainer_of().\n\nNote that table->data could also be used directly, as this is the only\nmember needed from the 'net' structure, but that would increase the size\nof this fix, to use '*data' everywhere 'net->sctp.probe_interval' is\nused.","2025-01-19T11:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":19,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",5.5,"LOCAL","MEDIUM","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NONE","LOW","HIGH",false,[22],"CWE-476",[24,25,26,27,28,29,30],"cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*",[32],"Linux Linux Kernel",[34,35,36,37,38,39],"https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F1dc5da6c4178f3e4b95c631418f72de9f86c0449","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F284a221f8fa503628432c7bb5108277c688c6ffa","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F44ee8635922b6eb940faddb961a8347c6857d722","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002F6259d2484d0ceff42245d1f09cc8cb6ee72d847a","https:\u002F\u002Fgit.kernel.org\u002Fstable\u002Fc\u002Fbcf8c60074e81ed2ac2d35130917175a3949c917","https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F03\u002Fmsg00001.html",0.28,0.00217,0.1209,null,{"timestamp":45,"automatable":46,"tech_impact":47,"exploitation":48,"cisa_decision":49,"cisa_remediation_timeline":53},"2025-10-01T19:54:13.852333Z","no","partial","none",{"vector":50,"decision":51,"priority":52},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T19:14:44.314474\u002F","track_star","medium","60D",[55],{"name":56,"source":57,"tactics":58,"technique_id":60},"Exploitation for Privilege Escalation","attack_vector",[59],"privilege-escalation","T1068",[]]