CVE-2025-21646 (GCVE-0-2025-21646)

Vulnerability from cvelistv5 – Published: 2025-01-19 10:18 – Updated: 2026-08-05 11:53
VLAI
Title
afs: Fix the maximum cell name length
Summary
In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs filesystem limits the maximum length of a cell to 256 bytes, but a problem occurs if someone actually does that: kafs tries to create a directory under /proc/net/afs/ with the name of the cell, but that fails with a warning: WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:405 because procfs limits the maximum filename length to 255. However, the DNS limits the maximum lookup length and, by extension, the maximum cell name, to 255 less two (length count and trailing NUL). Fix this by limiting the maximum acceptable cellname length to 253. This also allows us to be sure we can create the "/afs/.<cell>/" mountpoint too. Further, split the YFS VL record cell name maximum to be the 256 allowed by the protocol and ignore the record retrieved by YFSVL.GetCellName if it exceeds 253.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: c3e9f888263bb4df11cbd623ceced02081cb2f9f , < 9340385468d056bb700b8f28df236b81fc86a079 (git)
Affected: c3e9f888263bb4df11cbd623ceced02081cb2f9f , < 7cb3e77e9b4e6ffa325a5559393d3283c9af3d01 (git)
Affected: c3e9f888263bb4df11cbd623ceced02081cb2f9f , < aabe47cf5ac5e1db2ae0635f189d836f67024904 (git)
Affected: c3e9f888263bb4df11cbd623ceced02081cb2f9f , < 7673030efe0f8ca1056d3849d61784c6caa052af (git)
Affected: c3e9f888263bb4df11cbd623ceced02081cb2f9f , < 7922b1f058fe24a93730511dd0ae2e1630920096 (git)
Affected: c3e9f888263bb4df11cbd623ceced02081cb2f9f , < 8fd56ad6e7c90ac2bddb0741c6b248c8c5d56ac8 (git)
Create a notification for this product.
Linux Linux Affected: 5.8
Unaffected: 0 , < 5.8 (semver)
Unaffected: 5.10.234 , ≤ 5.10.* (semver)
Unaffected: 5.15.177 , ≤ 5.15.* (semver)
Unaffected: 6.1.125 , ≤ 6.1.* (semver)
Unaffected: 6.6.72 , ≤ 6.6.* (semver)
Unaffected: 6.12.10 , ≤ 6.12.* (semver)
Unaffected: 6.13 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T20:58:26.381Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/afs/afs.h",
            "fs/afs/afs_vl.h",
            "fs/afs/vl_alias.c",
            "fs/afs/vlclient.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9340385468d056bb700b8f28df236b81fc86a079",
              "status": "affected",
              "version": "c3e9f888263bb4df11cbd623ceced02081cb2f9f",
              "versionType": "git"
            },
            {
              "lessThan": "7cb3e77e9b4e6ffa325a5559393d3283c9af3d01",
              "status": "affected",
              "version": "c3e9f888263bb4df11cbd623ceced02081cb2f9f",
              "versionType": "git"
            },
            {
              "lessThan": "aabe47cf5ac5e1db2ae0635f189d836f67024904",
              "status": "affected",
              "version": "c3e9f888263bb4df11cbd623ceced02081cb2f9f",
              "versionType": "git"
            },
            {
              "lessThan": "7673030efe0f8ca1056d3849d61784c6caa052af",
              "status": "affected",
              "version": "c3e9f888263bb4df11cbd623ceced02081cb2f9f",
              "versionType": "git"
            },
            {
              "lessThan": "7922b1f058fe24a93730511dd0ae2e1630920096",
              "status": "affected",
              "version": "c3e9f888263bb4df11cbd623ceced02081cb2f9f",
              "versionType": "git"
            },
            {
              "lessThan": "8fd56ad6e7c90ac2bddb0741c6b248c8c5d56ac8",
              "status": "affected",
              "version": "c3e9f888263bb4df11cbd623ceced02081cb2f9f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/afs/afs.h",
            "fs/afs/afs_vl.h",
            "fs/afs/vl_alias.c",
            "fs/afs/vlclient.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.8"
            },
            {
              "lessThan": "5.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.234",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.177",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.125",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.72",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.234",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.177",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.125",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.72",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.10",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13",
                  "versionStartIncluding": "5.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix the maximum cell name length\n\nThe kafs filesystem limits the maximum length of a cell to 256 bytes, but a\nproblem occurs if someone actually does that: kafs tries to create a\ndirectory under /proc/net/afs/ with the name of the cell, but that fails\nwith a warning:\n\n        WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:405\n\nbecause procfs limits the maximum filename length to 255.\n\nHowever, the DNS limits the maximum lookup length and, by extension, the\nmaximum cell name, to 255 less two (length count and trailing NUL).\n\nFix this by limiting the maximum acceptable cellname length to 253.  This\nalso allows us to be sure we can create the \"/afs/.\u003ccell\u003e/\" mountpoint too.\n\nFurther, split the YFS VL record cell name maximum to be the 256 allowed by\nthe protocol and ignore the record retrieved by YFSVL.GetCellName if it\nexceeds 253."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The over-length cell name originates in a YFSVL.GetCellName reply processed by afs_deliver_yfsvl_get_cell_name() from a remote AFS/YFS Volume Location server over rxrpc/UDP port 7003, and is passed to afs_lookup_cell() by yfs_check_canonical_cell_name(); a 256-byte name is in fact only reachable this way, since local path components are capped at NAME_MAX (255).\nAC:L - A malicious, compromised, or DNS/UDP-spoofed VL server simply returns a 256-byte cell name in its GetCellName reply, which the pre-fix code accepts unconditionally \u2014 deterministic, no race and no memory-layout dependency.\nPR:N - The VL server response is consumed using the anonymous rxnull key with no authentication of the peer, so the attacker needs no credentials or account on the target host; the local automount path that initiates the RPC is likewise available to any unprivileged user with /afs access.\nUI:N - kAFS contacts its cells\u0027 VL servers autonomously \u2014 at mount, on automount traversal, and again whenever a GC\u0027d cell record is recreated with AFS_CELL_FL_CHECK_ALIAS set \u2014 so a compromised VL server for a cell the client already uses is queried during normal operation without any targeted victim action.\nS:U - The fault and its consequences stay entirely within the kernel of the AFS client; no VM, IOMMU, or sandbox boundary is crossed.\nC:N - The defect is purely a length-limit mismatch between AFS_MAXCELLNAME and the procfs name limit; no out-of-bounds read, use-after-free, or uninitialized data is exposed, and all associated buffers (keyname[261], kmalloc(AFS_MAXCELLNAME+1)) exactly accommodate a 256-byte name.\nI:N - There is no out-of-bounds write, type confusion, or attacker-controlled write primitive; the proc directory creation is cleanly rejected and cell activation fails with -ENOMEM, leaving no corrupted state.\nA:H - The path reaches WARN(1, \"name len %u\\n\") in proc_register(), producing a kernel warning splat that is an immediate panic on the many hardened, cloud, Android, and CI kernels booted with panic_on_warn=1, and it is repeatable on every cell lookup rather than a WARN_ONCE."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:53:20.429Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9340385468d056bb700b8f28df236b81fc86a079"
        },
        {
          "url": "https://git.kernel.org/stable/c/7cb3e77e9b4e6ffa325a5559393d3283c9af3d01"
        },
        {
          "url": "https://git.kernel.org/stable/c/aabe47cf5ac5e1db2ae0635f189d836f67024904"
        },
        {
          "url": "https://git.kernel.org/stable/c/7673030efe0f8ca1056d3849d61784c6caa052af"
        },
        {
          "url": "https://git.kernel.org/stable/c/7922b1f058fe24a93730511dd0ae2e1630920096"
        },
        {
          "url": "https://git.kernel.org/stable/c/8fd56ad6e7c90ac2bddb0741c6b248c8c5d56ac8"
        }
      ],
      "title": "afs: Fix the maximum cell name length",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-21646",
    "datePublished": "2025-01-19T10:18:02.776Z",
    "dateReserved": "2024-12-29T08:45:45.728Z",
    "dateUpdated": "2026-08-05T11:53:20.429Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-21646",
      "date": "2026-08-05",
      "epss": "0.00436",
      "percentile": "0.35878"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-21646\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-01-19T11:15:10.197\",\"lastModified\":\"2026-07-30T06:17:11.907\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nafs: Fix the maximum cell name length\\n\\nThe kafs filesystem limits the maximum length of a cell to 256 bytes, but a\\nproblem occurs if someone actually does that: kafs tries to create a\\ndirectory under /proc/net/afs/ with the name of the cell, but that fails\\nwith a warning:\\n\\n        WARNING: CPU: 0 PID: 9 at fs/proc/generic.c:405\\n\\nbecause procfs limits the maximum filename length to 255.\\n\\nHowever, the DNS limits the maximum lookup length and, by extension, the\\nmaximum cell name, to 255 less two (length count and trailing NUL).\\n\\nFix this by limiting the maximum acceptable cellname length to 253.  This\\nalso allows us to be sure we can create the \\\"/afs/.\u003ccell\u003e/\\\" mountpoint too.\\n\\nFurther, split the YFS VL record cell name maximum to be the 256 allowed by\\nthe protocol and ignore the record retrieved by YFSVL.GetCellName if it\\nexceeds 253.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: afs: Arreglar la longitud m\u00e1xima del nombre de celda El sistema de archivos kafs limita la longitud m\u00e1xima de una celda a 256 bytes, pero ocurre un problema si alguien realmente hace eso: kafs intenta crear un directorio bajo /proc/net/afs/ con el nombre de la celda, pero eso falla con una advertencia: ADVERTENCIA: CPU: 0 PID: 9 en fs/proc/generic.c:405 porque procfs limita la longitud m\u00e1xima del nombre de archivo a 255. Sin embargo, el DNS limita la longitud m\u00e1xima de b\u00fasqueda y, por extensi\u00f3n, el nombre m\u00e1ximo de celda, a 255 menos dos (recuento de longitud y NUL final). Arregle esto limitando la longitud m\u00e1xima aceptable del nombre de celda a 253. Esto tambi\u00e9n nos permite estar seguros de que podemos crear el punto de montaje \\\"/afs/./\\\" tambi\u00e9n. Adem\u00e1s, divida el nombre de celda del registro YFS VL al m\u00e1ximo de 256 permitido por el protocolo e ignore el registro recuperado por YFSVL.GetCellName si excede 253.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/afs/afs.h\",\"fs/afs/afs_vl.h\",\"fs/afs/vl_alias.c\",\"fs/afs/vlclient.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"c3e9f888263bb4df11cbd623ceced02081cb2f9f\",\"lessThan\":\"9340385468d056bb700b8f28df236b81fc86a079\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c3e9f888263bb4df11cbd623ceced02081cb2f9f\",\"lessThan\":\"7cb3e77e9b4e6ffa325a5559393d3283c9af3d01\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c3e9f888263bb4df11cbd623ceced02081cb2f9f\",\"lessThan\":\"aabe47cf5ac5e1db2ae0635f189d836f67024904\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c3e9f888263bb4df11cbd623ceced02081cb2f9f\",\"lessThan\":\"7673030efe0f8ca1056d3849d61784c6caa052af\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c3e9f888263bb4df11cbd623ceced02081cb2f9f\",\"lessThan\":\"7922b1f058fe24a93730511dd0ae2e1630920096\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c3e9f888263bb4df11cbd623ceced02081cb2f9f\",\"lessThan\":\"8fd56ad6e7c90ac2bddb0741c6b248c8c5d56ac8\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/afs/afs.h\",\"fs/afs/afs_vl.h\",\"fs/afs/vl_alias.c\",\"fs/afs/vlclient.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.8\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.8\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.234\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.177\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.125\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.72\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.10\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.13\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.8\",\"versionEndExcluding\":\"5.10.234\",\"matchCriteriaId\":\"A551F334-B04F-4925-AD49-DCB0F831CFEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.177\",\"matchCriteriaId\":\"71A3AFDC-A3CA-454F-8917-E998BBDE36F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.125\",\"matchCriteriaId\":\"9AFD566B-ECC6-46F1-92F7-12A615D5685F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.72\",\"matchCriteriaId\":\"33E12097-C88A-45B4-9677-2A961A08DD3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.10\",\"matchCriteriaId\":\"02D604F6-10D1-4F7B-A022-0888406A1121\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"62567B3C-6CEE-46D0-BC2E-B3717FBF7D13\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A073481-106D-4B15-B4C7-FB0213B8E1D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE491969-75AE-4A6B-9A58-8FC5AF98798F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"93C0660D-7FB8-4FBA-892A-B064BA71E49E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"034C36A6-C481-41F3-AE9A-D116E5BE6895\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/7673030efe0f8ca1056d3849d61784c6caa052af\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7922b1f058fe24a93730511dd0ae2e1630920096\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7cb3e77e9b4e6ffa325a5559393d3283c9af3d01\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8fd56ad6e7c90ac2bddb0741c6b248c8c5d56ac8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9340385468d056bb700b8f28df236b81fc86a079\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/aabe47cf5ac5e1db2ae0635f189d836f67024904\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-30T09:41:34+00:00",
      "cve": "CVE-2025-21646",
      "id": "CVE-2025-21646",
      "initial_release_date": "2025-01-19T00:00:00+00:00",
      "product_status:fixed": "305",
      "product_status:known_affected": "22",
      "product_status:known_not_affected": "166",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: afs: Fix the maximum cell name length",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-21646.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-31T01:21:15Z",
      "cve": "CVE-2025-21646",
      "id": "CVE-2025-21646",
      "initial_release_date": "2025-01-20T03:47:33Z",
      "product_status:known_affected": "508",
      "product_status:known_not_affected": "282",
      "product_status:recommended": "353",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-21646",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-21646.json",
      "version": "55"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.