CVE-2025-21659 Details
Description
In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at the very least NAPI instance belongs to the same netns as the owner of the genl sock. napi_by_id() can become static now, but it needs to move because of dev_get_by_napi_id().
A vulnerability in the Linux kernel's netdev component allowed for improper access to NAPI (New API) instances across different network namespaces. NAPI IDs were not fully exposed to user space before the introduction of the netlink API, resulting in a lack of proper namespacing. The netlink API must ensure that NAPI instances are accessed only within the same network namespace as the owning generic netlink socket. This vulnerability has been addressed by making the NAPI ID access static, although it requires relocation due to dependencies on the device retrieval function by NAPI ID.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/b683ba0df11ff563cc237eb1b74d6adfa77226bf | kernel.org | Patch |
| https://git.kernel.org/stable/c/d1cacd74776895f6435941f86a1130e58f6dd226 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.8, < 6.12.10 6.13 rc1 6.13 rc2 6.13 rc3 6.13 rc4 6.13 rc5 6.13 rc6 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 30, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Oct 15, 2025 | Initial Analysis | [email protected] |
| Jan 21, 2025 | New CVE Received | kernel.org |