cbcvebase.
CVE-2025-21830
published 2025-03-06

CVE-2025-21830: In the Linux kernel, the following vulnerability has been resolved: landlock: Handle weird files A corrupted filesystem (e.g. bcachefs) might return weird…

PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.18%
7.6th percentile
In the Linux kernel, the following vulnerability has been resolved: landlock: Handle weird files A corrupted filesystem (e.g. bcachefs) might return weird files. Instead of throwing a warning and allowing access to such file, treat them as regular files.

Affected

19 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.129-1 (bookworm)linux 6.1.129-1 (bookworm)
debianlinux-6.1< linux 6.1.129-1 (bookworm)linux 6.1.129-1 (bookworm)
linuxlinux
linuxlinux>= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d < a1fccf6b72b56343dd4f2d96b008147f9951eebda1fccf6b72b56343dd4f2d96b008147f9951eebd
linuxlinux>= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d < 7d6121228959ddf44a4b9b6a177384ac7854e2f97d6121228959ddf44a4b9b6a177384ac7854e2f9
linuxlinux>= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d < 39bb3d56f1c351e76bb18895d0e73796e653d5c139bb3d56f1c351e76bb18895d0e73796e653d5c1
linuxlinux>= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d < 2569e65d2eb6ac1afe6cb6dfae476afee8b6771a2569e65d2eb6ac1afe6cb6dfae476afee8b6771a
linuxlinux>= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d < 0fde195a373ab1267e60baa9e1a703a97e7464cd0fde195a373ab1267e60baa9e1a703a97e7464cd
linuxlinux>= cb2c7d1a1776057c9a1f48ed1250d85e94d4850d < 49440290a0935f428a1e43a5ac8dc275a647ff8049440290a0935f428a1e43a5ac8dc275a647ff80
linuxlinux_kernel>= 0 < 6.1.129-16.1.129-1
linuxlinux_kernel>= 0 < 6.12.13-16.12.13-1
linuxlinux_kernel>= 0 < 6.12.13-16.12.13-1
linuxlinux_kernel>= 0 < 5.15.0-140.1505.15.0-140.150
linuxlinux_kernel>= 0 < 6.8.0-64.676.8.0-64.67
linuxlinux_kernel>= 5.13 < 5.15.1795.15.179
linuxlinux_kernel>= 5.16 < 6.1.1296.1.129
linuxlinux_kernel>= 6.13 < 6.13.26.13.2
linuxlinux_kernel>= 6.2 < 6.6.766.6.76
linuxlinux_kernel>= 6.7 < 6.12.136.12.13

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.