CVE-2025-21787

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

team: better TEAM_OPTION_TYPE_STRING validation

syzbot reported following splat [1]

Make sure user-provided data contains one nul byte.

[1]

BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:633 [inline]

BUG: KMSAN: uninit-value in string+0x3ec/0x5f0 lib/vsprintf.c:714

string_nocheck lib/vsprintf.c:633 [inline]

string+0x3ec/0x5f0 lib/vsprintf.c:714

vsnprintf+0xa5d/0x1960 lib/vsprintf.c:2843

__request_module+0x252/0x9f0 kernel/module/kmod.c:149

team_mode_get drivers/net/team/team_core.c:480 [inline]

team_change_mode drivers/net/team/team_core.c:607 [inline]

team_mode_option_set+0x437/0x970 drivers/net/team/team_core.c:1401

team_option_set drivers/net/team/team_core.c:375 [inline]

team_nl_options_set_doit+0x1339/0x1f90 drivers/net/team/team_core.c:2662

genl_family_rcv_msg_doit net/netlink/genetlink.c:1115 [inline]

genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline]

genl_rcv_msg+

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References