CVE-2025-21761

openvswitch: use RCU protection in ovs_vport_cmd_fill_info()

State: Published
Severity: 7.8 High
Published: Feb 27, 2025
Updated: Oct 15, 2026
Reserved: Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: use RCU protection in ovs_vport_cmd_fill_info()

ovs_vport_cmd_fill_info() can be called without RTNL or RCU.

Use RCU protection and dev_net_rcu() to avoid potential UAF.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	9354d452034273a50a4fd703bea31e5d6b1fc20b to before e85a25d1a9985645e796039e843d1de581d2de1eAffected 9354d452034273a50a4fd703bea31e5d6b1fc20b to before a8816b3f1f151373fd30f1996f00480126c8bb11Affected 9354d452034273a50a4fd703bea31e5d6b1fc20b to before a884f57600e463f69d7b279c4598b865260b62a1Affected 9354d452034273a50a4fd703bea31e5d6b1fc20b to before 7e01abc34e87abd091e619161a20f54ed4e3e2daAffected 9354d452034273a50a4fd703bea31e5d6b1fc20b to before 8ec57509c36c8b9a23e50b7858dda0c520a2d074Affected 9354d452034273a50a4fd703bea31e5d6b1fc20b to before a849a10de5e04d798f7f286a2f1ca174719a617aAffected 9354d452034273a50a4fd703bea31e5d6b1fc20b to before 5828937742af74666192835d657095d95c53dbd0Affected 9354d452034273a50a4fd703bea31e5d6b1fc20b to before 90b2f49a502fa71090d9f4fe29a2f51fe5dff76dAffected
LinuxLinux	4.15Affected before 4.15Not affected 5.4.291 through 5.4.Not affected 5.10.235 through 5.10.Not affected 5.15.179 through 5.15.Not affected 6.1.129 through 6.1.Not affected 6.6.79 through 6.6.Not affected 6.12.16 through 6.12.Not affected 6.13.4 through 6.13.*Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

9354d452034273a50a4fd703bea31e5d6b1fc20b to before e85a25d1a9985645e796039e843d1de581d2de1eAffected
9354d452034273a50a4fd703bea31e5d6b1fc20b to before a8816b3f1f151373fd30f1996f00480126c8bb11Affected
9354d452034273a50a4fd703bea31e5d6b1fc20b to before a884f57600e463f69d7b279c4598b865260b62a1Affected
9354d452034273a50a4fd703bea31e5d6b1fc20b to before 7e01abc34e87abd091e619161a20f54ed4e3e2daAffected
9354d452034273a50a4fd703bea31e5d6b1fc20b to before 8ec57509c36c8b9a23e50b7858dda0c520a2d074Affected
9354d452034273a50a4fd703bea31e5d6b1fc20b to before a849a10de5e04d798f7f286a2f1ca174719a617aAffected
9354d452034273a50a4fd703bea31e5d6b1fc20b to before 5828937742af74666192835d657095d95c53dbd0Affected
9354d452034273a50a4fd703bea31e5d6b1fc20b to before 90b2f49a502fa71090d9f4fe29a2f51fe5dff76dAffected

LinuxLinux

4.15Affected
before 4.15Not affected
5.4.291 through 5.4.*Not affected
5.10.235 through 5.10.*Not affected
5.15.179 through 5.15.*Not affected
6.1.129 through 6.1.*Not affected
6.6.79 through 6.6.*Not affected
6.12.16 through 6.12.*Not affected
6.13.4 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.