01 Record

CVE-2025-21629

net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets

HighPUBLISHEDCNA: Linux

CNA base score8.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

View raw JSON

02 Description

net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.43% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 36.9% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-01-15 13:06Z1 YR AGO

Last updated

2026-08-05 11:53Z2 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.2)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Weaknesses

CWE-354Improper Validation of Integrity Check ValueBase

Data version

5.2

Document digest

4f92057d62c7b32b60e4f27f2346832931031288487bbb8a3d3efb4666ec77ad

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxa84978a9cda68f0afe3f01d476c68db21526baf1 to < ac9cfef69565021c9e1022a493a9c40b03e2caf9, c69bc67c1cb211aa390bea6e512bb01b1241fefb to < 95ccf006bbc8b59044313b8c309dcf29c546abd4, 04c20a9356f283da623903e81e7c6d5df7e4dc3c to < d3b7a9c7597b779039a51d7b34116fbe424bf2b7, 04c20a9356f283da623903e81e7c6d5df7e4dc3c to < 68e068cabd2c6c533ef934c2e5151609cf6ecc6d, bcefc3cd7f592a70fcbbbfd7ad1fbc69172ea78b, 477b35d94a21530046fe91589960732fcf2b29ed, a27a5c40ee4cbe00294e2c76160de5f2589061ba, 9f605135a5c0fe614c2b15197b9ced1e217eca59, 705350fbd6ed4b5d89ee045fa57a0594a72b17d7, 6.1.116 to < 6.1.124, 6.6.60 to < 6.6.70, 4.19.323 to < 4.20, 5.4.285 to < 5.5, 5.10.229 to < 5.11, 5.15.171 to < 5.16, 6.11.7 to < 6.12, 6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/ac9cfef69565021c9e1022a493a9c40b03e2caf9
git.kernel.orghttps://git.kernel.org/stable/c/95ccf006bbc8b59044313b8c309dcf29c546abd4
git.kernel.orghttps://git.kernel.org/stable/c/d3b7a9c7597b779039a51d7b34116fbe424bf2b7
git.kernel.orghttps://git.kernel.org/stable/c/68e068cabd2c6c533ef934c2e5151609cf6ecc6d
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.124-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.9-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.