Linux Kernel Vulnerability in Drop Monitor Affects VMware Virtual Platform

CVE-2025-21862

Summary

The Linux kernel contains a vulnerability within the drop_monitor system where a spinlock may be invoked before its proper initialization. This occurs specifically when the drop_monitor is being loaded as a kernel module, and a command to start the netlink monitoring service is received before the resources are set up properly. This misconfiguration can lead to unpredictable behavior, including system instability and potential denial of service conditions.

References