CVE - CVE-2025-21826

CVE-ID
CVE-2025-21826	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject mismatching sum of field_len with set key length The field length description provides the length of each separated key field in the concatenation, each field gets rounded up to 32-bits to calculate the pipapo rule width from pipapo_init(). The set key length provides the total size of the key aligned to 32-bits. Register-based arithmetics still allows for combining mismatching set key length and field length description, eg. set key length 10 and field description [ 5, 4 ] leading to pipapo width of 12.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1b9335a8000fb70742f7db10af314104b6ace220 URL:https://git.kernel.org/stable/c/1b9335a8000fb70742f7db10af314104b6ace220 MISC:https://git.kernel.org/stable/c/2ac254343d3cf228ae0738b2615fedf85d000752 URL:https://git.kernel.org/stable/c/2ac254343d3cf228ae0738b2615fedf85d000752 MISC:https://git.kernel.org/stable/c/49b7182b97bafbd5645414aff054b4a65d05823d URL:https://git.kernel.org/stable/c/49b7182b97bafbd5645414aff054b4a65d05823d MISC:https://git.kernel.org/stable/c/82e491e085719068179ff6a5466b7387cc4bbf32 URL:https://git.kernel.org/stable/c/82e491e085719068179ff6a5466b7387cc4bbf32 MISC:https://git.kernel.org/stable/c/ab50d0eff4a939d20c37721fd9766347efcdb6f6 URL:https://git.kernel.org/stable/c/ab50d0eff4a939d20c37721fd9766347efcdb6f6
Assigning CNA
kernel.org
Date Record Created
20241229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)