Linux Kernel Vulnerability in GTP Network Device Management

CVE-2025-21865

What is CVE-2025-21865?

A vulnerability has been identified in the Linux kernel's GTP (GPRS Tunneling Protocol) implementation, where improper handling during device destruction can lead to list corruption. This occurs in the gtp_net_exit_batch_rtnl() function, where a device may be de-linked twice under certain conditions. This could potentially allow an attacker to exploit the flaw during cleanup operations across different network namespaces, leading to unexpected behavior or application crashes. The issue has been addressed in later kernel updates to improve overall stability and security.

References