# Is there a fix for the CVE-2025-21756? **URL:** \ **Category:** Rocky Linux Help & Support\ **Tags:** rocky-linux-9\ **Created:** [May 28, 2025, 9:02am UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580 "2025-05-28T09:02:26Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![tango](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/tango/32/1150_2.png) [@tango](https://forums.rockylinux.org/u/tango)\ **Post date:** [May 28, 2025, 9:02am UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580/1 "2025-05-28T09:02:26Z")
Is there a fix for this issue? How can I solve this issue? ---
**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\ **Post date:** [May 28, 2025, 10:00am UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580/2 "2025-05-28T10:00:39Z")
More info? What Rocky version are you using? Just asking a CVE number without any further detail isn’t very helpful. That said, according to here: [https://access.redhat.com/security/cve/cve-2025-21756#cve-affected-packages](https://access.redhat.com/security/cve/cve-2025-21756#cve-affected-packages) I only see it affecting RHEL10 and RHEL8. Since Rocky 10 isn’t out, that leaves Rocky 8. Thus, looking at the links from the above one, we find: [https://access.redhat.com/errata/RHSA-2025:8056](https://access.redhat.com/errata/RHSA-2025:8056) which shows kernel 4.18.0-553.53 which isn’t out yet since 4.18.0-553-51 is the current one. I guess it will appear soon. ---
**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\ **Post date:** [May 28, 2025, 11:00am UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580/3 "2025-05-28T11:00:36Z")
> [@iwalker](#): > > I only see it affecting RHEL10 and RHEL8 On _first page_. RHEL 9 is there (on next page): “Fixed in 570-17.1.el9\_6”, [https://access.redhat.com/errata/RHSA-2025:7903](https://access.redhat.com/errata/RHSA-2025:7903) (There are also fixes for el9\_0, el9\_2, and el9\_4.) In other words, Rocky 9.5 does not, nor will have a fix – the fix will be in Rocky 9.6. * * * The vulnerability is in “Linux kernel’s VMware network driver”, kernel module ‘vsock’. I presume that the issue is only in virtual machines that run on VMware hypervisor and use that driver? ---
**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\ **Post date:** [May 28, 2025, 11:14am UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580/4 "2025-05-28T11:14:32Z")
> [@jlehtone](#): > > The vulnerability is in “Linux kernel’s VMware network driver”, kernel module ‘vsock’. I presume that the issue is only in virtual machines that run on VMware hypervisor and use that driver? Looks that way, my KVM VM’s don’t have that module loaded, but my VMware ones do. So those not on VMware won’t have any issues with this I’d expect. What with the team working on releasing 9.6 and 10.0 at present will mean a little delay on this. ---
**Author:** ![tango](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/tango/32/1150_2.png) [@tango](https://forums.rockylinux.org/u/tango)\ **Post date:** [May 28, 2025, 12:29pm UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580/5 "2025-05-28T12:29:29Z")
Hi iwalker, Jlehtone We have a bunch of (~100) servers running Rocky9 and some (\>10) hypervisors (libvirt) running Rocky8, ningun server using VMWare. For what you say for R9 I should wait for 9.6 and for R8 I would be covered by the fact that I am not using VMWARE. Do I understand correctly? ---
**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\ **Post date:** [May 28, 2025, 12:52pm UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580/6 "2025-05-28T12:52:25Z")
Yep pretty much, we need to wait for all the updates to come out for RL8 and RL9. ---
**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\ **Post date:** [May 28, 2025, 5:25pm UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580/7 "2025-05-28T17:25:25Z")
Until then the mitigation is to not load the ‘vsock’. Can a guest on VMware operate without the vsock? Are there alternative virtual network hardware in VMware? ---
**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\ **Post date:** [May 29, 2025, 8:59am UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580/8 "2025-05-29T08:59:09Z")
New kernel arrived today for RL8, so 4.18.0-553.53 is available to address that issue. ---
**Author:** ![tango](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/tango/32/1150_2.png) [@tango](https://forums.rockylinux.org/u/tango)\ **Post date:** [May 29, 2025, 11:11am UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580/9 "2025-05-29T11:11:28Z")
Nice, Thank you iwalker ---
**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\ **Post date:** [July 28, 2025, 11:11am UTC](https://forums.rockylinux.org/t/is-there-a-fix-for-the-cve-2025-21756/18580/10 "2025-07-28T11:11:50Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.