CVE-2025-21830

MediumCVSS 5.5/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

landlock: Handle weird files

A corrupted filesystem (e.g. bcachefs) might return weird files. Instead of throwing a warning and allowing access to such file, treat them as regular files.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d, < a1fccf6b72b56343dd4f2d96b008147f9951eebd; >= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d, < 7d6121228959ddf44a4b9b6a177384ac7854e2f9; >= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d, < 39bb3d56f1c351e76bb18895d0e73796e653d5c1; >= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d, < 2569e65d2eb6ac1afe6cb6dfae476afee8b6771a; >= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d, < 0fde195a373ab1267e60baa9e1a703a97e7464cd; >= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d, < 49440290a0935f428a1e43a5ac8dc275a647ff80
LinuxLinux5.13
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< *

References

Timeline

Published
Mar 6, 2025
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-218315.5In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 commiCVE-2025-218325.5In the Linux kernel, the following vulnerability has been resolved: block: don't revert iter for -EIOCBQUEUED blkdev_read_iter() has a fewCVE-2025-218335.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE There is a WARN_ON_ONCVE-2025-218345.5In the Linux kernel, the following vulnerability has been resolved: seccomp: passthrough uretprobe systemcall without filtering When attacCVE-2025-218355.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: fix MIDI Streaming descriptor lengths While the MCVE-2025-218365.5In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: reallocate buf lists on upgrade IORING_REGISTER_PBUF_RICVE-2025-218385.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: flush gadget workqueue after device removal device_CVE-2025-218395.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loCVE-2025-21845.3A credential management flaw in Palo Alto Networks Cortex XDR® Broker VM causes different Broker VM images to share identical default credenCVE-2025-218405.5In the Linux kernel, the following vulnerability has been resolved: thermal/netlink: Prevent userspace segmentation fault by adjusting UAPICVE-2025-218415.5In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Fix cpufreq_policy ref counting amd_pstate_update_CVE-2025-218425.5In the Linux kernel, the following vulnerability has been resolved: amdkfd: properly free gang_ctx_bo when failed to init user queue The d
CVE-2025-21830: Medium severity, CVSS 5.5 | Vulnix