CVE-2025-24934

Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host will not directly observe any problems. However, due to its membership in a load-balancing group, that socket will receive packets originating from any host. This breaks the contract of the connect(2) and implied connect via sendto(2), and may leave the application vulnerable to spoofing attacks. The kernel failed to check the connection state of sockets when adding them to load-balancing groups. Furthermore, when looking up the destination socket for an incoming packet, the kernel will match a socket belonging to a load-balancing group even if it is connected, in violation of the contract that connected sockets are only supposed to receive packets originating from the connected host.

• CWE-488

• https://security.freebsd.org/advisories/FreeBSD-SA-25:09.netinet.asc
• https://www.usenix.org/system/files/conference/usenixsecurity26/sec26_prepub_ben-simhon.pdf

Published

Oct 22, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-24922A stack-based buffer overflow vulnerability exists in the s…8.8
• CVE-2025-24923Uncontrolled search path in some Intel(R) AI for Enterprise …6.7
• CVE-2025-24924Certain functionality within GMOD Apollo does not require au…9.8
• CVE-2025-24925in OpenHarmony v5.0.3 and prior versions allow a local attac…5.5
• CVE-2025-24928libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-…7.7
• CVE-2025-2493Path Traversal vulnerability in Softdial Contact Center of S…7.5
• CVE-2025-24936The web application allows user input to pass unfiltered to …9
• CVE-2025-24937File contents could be read from the local file system by an…9
• CVE-2025-24938The web application allows user input to pass unfiltered to …8.4
• CVE-2025-2494Unrestricted file upload to Softdial Contact Center of Sytel…9.8
• CVE-2025-24946The hash table used to manage connections in picoquic before…5.3
• CVE-2025-24947A hash collision vulnerability (in the hash table used to ma…5.3