Critical Vulnerability in Linux Kernel: RDS Sysctl Null Pointer Dereference
Summary
DEBIAN-CVE-2025-21635: In the Linux kernel, the following vulnerability has been resolved: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current... Affects linux versions < 6.12.10-1. Fixed in 6.12.10-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and hardware communication. It provides essential services for all other software running on the system. The kernel is modular, allowing for various functionalities to be added or removed as needed. However, vulnerabilities in the kernel can lead to severe security risks, including system crashes and unauthorized access.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the RDS (Reliable Datagram Sockets) subsystem. The issue arises from the use of 'current->nsproxy' to access network namespace information, which can lead to inconsistencies and potential null pointer dereferences. Specifically, when the current task is exiting, 'current->nsproxy' may be NULL, resulting in a crash (null-ptr-deref). This vulnerability can be exploited to cause system instability and may allow attackers to gain unauthorized access to system resources.
How To Fix
Minimum fixed version
6.12.10-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is advisable to apply the patch as soon as it becomes available to mitigate risks.
Conclusion
The identified vulnerability in the Linux kernel's RDS subsystem poses significant risks to system stability and security. Users are strongly advised to update to the patched version to protect their systems from potential exploitation. Regular monitoring and prompt application of security updates are essential for maintaining system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a null pointer dereference in the RDS subsystem of the Linux kernel, which can lead to system crashes.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Exploitation of this vulnerability can lead to system instability, crashes, and potential unauthorized access to system resources.
Yes, a patch is available in version 6.12.10-1 of the Linux package. It is recommended to update to this version.
While there are no specific workarounds, it is crucial to monitor the situation and apply the patch as soon as possible to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
