Answer in brief
CVE-2025-21683 records a Medium severity (CVSS 5.5) vulnerability in bpf: Fix bpf_sk_select_reuseport() memory leak. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystem (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=64d85290d79c0677edb5a8ee2295b36c022fa5df <bb36838dac7bb334a3f3d7eb29875593ec9473fc || >=64d85290d79c0677edb5a8ee2295b36c022fa5df <0ab52a8ca6e156a64c51b5e7456cac9a0ebfd9bf || >=64d85290d79c0677edb5a8ee2295b36c022fa5df <d0a3b3d1176d39218b8edb2a2d03164942ab9ccd || >=64d85290d79c0677edb5a8ee2295b36c022fa5df <b02e70be498b138e9c21701c2f33f4018ca7cd5e || >=64d85290d79c0677edb5a8ee2295b36c022fa5df <cccd51dd22574216e64e5d205489e634f86999f3 || >=64d85290d79c0677edb5a8ee2295b36c022fa5df <b3af60928ab9129befa65e6df0310d27300942bf | bb36838dac7bb334a3f3d7eb29875593ec9473fc, 0ab52a8ca6e156a64c51b5e7456cac9a0ebfd9bf, d0a3b3d1176d39218b8edb2a2d03164942ab9ccd, b02e70be498b138e9c21701c2f33f4018ca7cd5e, cccd51dd22574216e64e5d205489e634f86999f3, b3af60928ab9129befa65e6df0310d27300942bf |
| Linux/Linuxgeneric | 5.8 | Not reported |
| Siemens/SIMATIC S7-1500 TM MFP - GNU/Linux subsystemgeneric | >=0 <* | * |
Published upstream
Jan 31, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 15, 2026
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_sk_select_reuseport() memory leak As pointed out in the original comment, lookup in sockmap can return a TCP ESTABLISHED socket. Such TCP socket may have had SO_ATTACH_REUSEPORT_EBPF set before it was ESTABLISHED. In other words, a non-NULL sk_reuseport_cb does not imply a non-refcounted socket. Drop sk's reference in both error paths. unreferenced object 0xffff888101911800 (size 2048): comm "test_progs", pid 44109, jiffies 4297131437 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 80 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 9336483b): __kmalloc_noprof+0x3bf/0x560 __reuseport_alloc+0x1d/0x40 reuseport_alloc+0xca/0x150 reuseport_attach_prog+0x87/0x140 sk_reuseport_attach_bpf+0xc8/0x100 sk_setsockopt+0x1181/0x1990 do_sock_setsockopt+0x12b/0x160 __sys_setsockopt+0x7b/0xc0 __x64_sys_setsockopt+0x1b/0x30 do_syscall_64+0x93/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Quoted source text, attributed separately from HOL analysis.