PatchTheCVEkestrel vulnerabilities and fixes
Recent CVEs affecting kestrel, with upgrade or downgrade steps. 10 tracked.
kestrel has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-07-01. Highest priority: CVE-2025-49492 (score 37/100).
- CVE-2025-5072 MEDIUM 5.4 UPGRADE UPGRADE Resource leak vulnerability in ASR180x、ASR190x in con_mgr allows Resource Leak Exposure.This issue affects Fal
- CVE-2025-49492 HIGH 7.4 UPGRADE UPGRADE Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associat
- CVE-2025-49491 MEDIUM 5.4 UPGRADE UPGRADE Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (traffi
- CVE-2025-49490 MEDIUM 5.4 UPGRADE UPGRADE Resource leak vulnerability in ASR180x in router allows Resource Leak Exposure. This vulnerability is associa
- CVE-2025-49489 MEDIUM 5.4 UPGRADE UPGRADE Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (con_mg
- CVE-2025-49488 MEDIUM 5.4 UPGRADE UPGRADE Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router components allows Resour
- CVE-2025-49483 MEDIUM 5.4 UPGRADE UPGRADE Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak
- CVE-2025-49482 MEDIUM 5.4 UPGRADE UPGRADE Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak
- CVE-2025-49481 MEDIUM 5.4 UPGRADE UPGRADE Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router modules allows Resource Leak
- CVE-2025-49480 HIGH 7.4 UPGRADE UPGRADE Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program fil
FAQ
How do I fix kestrel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kestrel being exploited right now?
None of the tracked kestrel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kestrel CVE should I patch first?
CVE-2025-49492 currently ranks highest (37/100): Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associat.