Riskcovery

CVE-2025-21760

ndisc: extend RCU protection in ndisc_send_skb()

State
Published
Severity
8.1 High
Published
Feb 27, 2025
Updated
Oct 15, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ndisc: extend RCU protection in ndisc_send_skb()

ndisc_send_skb() can be called without RTNL or RCU held.

Acquire rcu_read_lock() earlier, so that we can use dev_net_rcu() and avoid a potential UAF.

Scores

CVSSScoreVectorSource
3.18.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HLinux
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 1762f7e88eb34f653b4a915be99a102e347dd45e to before 10a1f3fece2f0d23a3a618b72b2b4e6f408ef7d1Affected
  • 1762f7e88eb34f653b4a915be99a102e347dd45e to before 4d576202b90b1b95a7c428a80b536f91b8201bccAffected
  • 1762f7e88eb34f653b4a915be99a102e347dd45e to before e24d225e4cb8cf108bde00b76594499b98f0a74dAffected
  • 1762f7e88eb34f653b4a915be99a102e347dd45e to before a9319d800b5701e7f5e3fa71a5b7c4831fc20d6dAffected
  • 1762f7e88eb34f653b4a915be99a102e347dd45e to before ae38982f521621c216fc2f5182cd091f4734641dAffected
  • 1762f7e88eb34f653b4a915be99a102e347dd45e to before 789230e5a8c1097301afc802e242c79bc8835c67Affected
  • 1762f7e88eb34f653b4a915be99a102e347dd45e to before 04e05112f10354ffc3bb6cc796d553bab161594cAffected
  • 1762f7e88eb34f653b4a915be99a102e347dd45e to before ed6ae1f325d3c43966ec1b62ac1459e2b8e45640Affected
LinuxLinux
  • 2.6.26Affected
  • before 2.6.26Not affected
  • 5.4.291 through 5.4.*Not affected
  • 5.10.235 through 5.10.*Not affected
  • 5.15.179 through 5.15.*Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.79 through 6.6.*Not affected
  • 6.12.16 through 6.12.*Not affected
  • 6.13.4 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.