Kernel Crash Vulnerability in OpenBSD 7.5 and 7.6 Released by OpenBSD
CVE-2025-30334

7.1HIGH

Key Information:

Vendor

OpenBSD
Status
OpenBSD
Vendor
CVE Published:
20 March 2025

What is CVE-2025-30334?

In OpenBSD versions 7.5 and 7.6, an issue has been identified where traffic sent over the wg(4) network interface could lead to a kernel crash. This vulnerability affects system stability and may disrupt services for users reliant on the affected versions of OpenBSD. It is essential to apply the appropriate errata patches to mitigate risks and ensure system reliability.

Affected Version(s)

OpenBSD 7.6 < 7.6 errata 006

OpenBSD 7.5 < 7.5 errata 015

OpenBSD 7.6 errata 008

References

https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/00...
https://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/01...
https://github.com/openbsd/src/commit/c06199859734d958552...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-30334 : Kernel Crash Vulnerability in OpenBSD 7.5 and 7.6 Released by OpenBSD