Device Management Flaw in Linux Kernel's GTP Implementation by The Linux Foundation

CVE-2025-21678

Summary

A vulnerability exists in the GTP implementation of the Linux Kernel that affects the device management process related to UDP sockets within network namespaces. Specifically, the GTP interface does not properly associate the device with the correct network namespace after the UDP socket is created. This flaw leads to potential resource management instability when the source network namespace is removed, causing system instability and potential crashes. It is crucial that the Linux kernel's handling of GTP devices and sockets is reviewed and updated to ensure proper linkage and cleanup to prevent such issues.

References