CVE-2025-21954

A flaw was found in the Linux kernel's network memory (netmem) subsystem. This vulnerability allows a privileged local user to cause a Denial of Service (DoS) by crashing the system. By configuring network packet redirection rules, unreadable receive network memory buffers can be forwarded into a device's transmission path. This causes the network device driver to perform Direct Memory Access (DMA) mapping on invalid addresses, triggering a kernel failure.

This vulnerability is rated as Low severity because successful exploitation requires administrative privileges (such as CAP_NET_ADMIN) to configure specialized traffic control packet redirection on interfaces utilizing device memory networking. The issue resides in the network memory subsystem introduced in modern kernel versions, meaning older enterprise releases are completely unaffected. Under default configurations, unreadable receive buffers are not forwarded across transmission paths, confining the overall risk to a local denial of service in customized network deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.