Packet Handling Flaw in Cisco IOS XR Software by Cisco Systems

CVE-2025-20141

What is CVE-2025-20141?

A flaw in the Cisco IOS XR Software allows unauthenticated adjacent attackers to manipulate packets, leading to control plane traffic failures across several Cisco IOS XR platforms. The issue arises from improper handling of specific packets punted to the route processor, particularly affecting the Linux stack on the device. By exploiting this vulnerability, an attacker can interrupt control plane operations, resulting in a denial of service (DoS) condition and impacting network reliability.

References