__xa_cmpxchg in the library lib/refcount.c. The manipulation leads to use after free.
This vulnerability is traded as CVE-2025-21714. Access to the local network is required for this attack to succeed. There is no exploit available.
It is suggested to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2025-21714 | Linux Kernel up to 6.12.12/6.13.1 lib/refcount.c __xa_cmpxchg use after free (Nessus ID 231919 / WID-SEC-2025-0453)
Reagiere als Erste:r — dein Feedback zählt!
A vulnerability marked as critical has been reported in Linux Kernel up to 6.12.12/6.13.1. Affected by this issue is the function
SOCIAL SHARE CARD GENERATOR