The PPP driver in the Linux kernel has been the subject of a security fix tracked as CVE-2025-21922, which addresses an uninitialized-value issue detected by KMSAN. This vulnerability can be triggered by crafted BPF socket filters, potentially leading to undefined kernel behavior, crashes, or service disruption. The fix ensures proper initialization of a two-byte header in the PPP driver, mitigating the availability risk. This topic is relevant for Linux system administrators and security professionals managing PPP connections.
-
The Linux kernel has received a small but important correction tracked as CVE-2025-21922: a KMSAN-detected uninitialized-value issue in the PPP driver that can be triggered by crafted BPF (Berkeley Packet Filter) socket filters. While the immediate technical problem is a two‑byte header that the...