01 Record

CVE-2025-21702

pfifo_tail_enqueue: Drop new packet when sch->limit == 0

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

pfifo_tail_enqueue: Drop new packet when sch->limit == 0

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.27% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 18.8% of scored records. A rank, not a probability.
NVD base score: 7.0 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-14.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-18 14:37Z1 YR AGO

Last updated

2026-08-05 11:53Z1 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-911Improper Update of Reference CountBase

Data version

5.2

Document digest

0cc5f7ec10e1f1162b4b367d23157cd3e3821379cfb487e588f4b3ef21511d1e

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux57dbb2d83d100ea601c54fe129bfde0678db5dee to < 78285b53266d6d51fa4ff504a23df03852eba84e, 57dbb2d83d100ea601c54fe129bfde0678db5dee to < 7a9723ec27aff5674f1fd4934608937f1d650980, 57dbb2d83d100ea601c54fe129bfde0678db5dee to < a56a6e8589a9b98d8171611fbcc1e45a15fd2455, 57dbb2d83d100ea601c54fe129bfde0678db5dee to < 020ecb76812a0526f4130ab5aeb6dc7c773e7ab9, 57dbb2d83d100ea601c54fe129bfde0678db5dee to < 79a955ea4a2e5ddf4a36328959de0de496419888, 57dbb2d83d100ea601c54fe129bfde0678db5dee to < e40cb34b7f247fe2e366fd192700d1b4f38196ca, 57dbb2d83d100ea601c54fe129bfde0678db5dee to < b6a079c3b6f95378f26e2aeda520cb3176f7067b, 57dbb2d83d100ea601c54fe129bfde0678db5dee to < 647cef20e649c576dff271e018d5d15d998b629d, 2.6.34—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/78285b53266d6d51fa4ff504a23df03852eba84e
git.kernel.orghttps://git.kernel.org/stable/c/7a9723ec27aff5674f1fd4934608937f1d650980
git.kernel.orghttps://git.kernel.org/stable/c/a56a6e8589a9b98d8171611fbcc1e45a15fd2455
git.kernel.orghttps://git.kernel.org/stable/c/020ecb76812a0526f4130ab5aeb6dc7c773e7ab9
git.kernel.orghttps://git.kernel.org/stable/c/79a955ea4a2e5ddf4a36328959de0de496419888
git.kernel.orghttps://git.kernel.org/stable/c/e40cb34b7f247fe2e366fd192700d1b4f38196ca
git.kernel.orghttps://git.kernel.org/stable/c/b6a079c3b6f95378f26e2aeda520cb3176f7067b
git.kernel.orghttps://git.kernel.org/stable/c/647cef20e649c576dff271e018d5d15d998b629d
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2025-21702

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-21702

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References