CVE-2025-21762

arp: use RCU protection in arp_xmit()

State: Published
Severity: 8.1 High
Published: Feb 27, 2025
Updated: Oct 15, 2026
Reserved: Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

arp: use RCU protection in arp_xmit()

arp_xmit() can be called without RTNL or RCU protection.

Use RCU protection to avoid potential UAF.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	29a26a56803855a79dbd028cd61abee56237d6e5 to before 10f555e3f573d004ae9d89b3276abb58c4ede5c3Affected 29a26a56803855a79dbd028cd61abee56237d6e5 to before 307cd1e2d3cb1cbc6c40c679cada6d7168b18431Affected 29a26a56803855a79dbd028cd61abee56237d6e5 to before d9366ac2f956a1948b68c0500f84a3462ff2ed8aAffected 29a26a56803855a79dbd028cd61abee56237d6e5 to before f189654459423d4d48bef2d120b4bfba559e6039Affected 29a26a56803855a79dbd028cd61abee56237d6e5 to before e9f4dee534eb1b225b0a120395ad9bc2afe164d3Affected 29a26a56803855a79dbd028cd61abee56237d6e5 to before 01d1b5c9abcaff29a43f1d17a19c33eec92c7dbeAffected 29a26a56803855a79dbd028cd61abee56237d6e5 to before 2c331718d3389b6c5f6855078ab7171849e016bdAffected 29a26a56803855a79dbd028cd61abee56237d6e5 to before a42b69f692165ec39db42d595f4f65a4c8f42e44Affected
LinuxLinux	4.4Affected before 4.4Not affected 5.4.291 through 5.4.Not affected 5.10.235 through 5.10.Not affected 5.15.179 through 5.15.Not affected 6.1.129 through 6.1.Not affected 6.6.79 through 6.6.Not affected 6.12.16 through 6.12.Not affected 6.13.4 through 6.13.*Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

29a26a56803855a79dbd028cd61abee56237d6e5 to before 10f555e3f573d004ae9d89b3276abb58c4ede5c3Affected
29a26a56803855a79dbd028cd61abee56237d6e5 to before 307cd1e2d3cb1cbc6c40c679cada6d7168b18431Affected
29a26a56803855a79dbd028cd61abee56237d6e5 to before d9366ac2f956a1948b68c0500f84a3462ff2ed8aAffected
29a26a56803855a79dbd028cd61abee56237d6e5 to before f189654459423d4d48bef2d120b4bfba559e6039Affected
29a26a56803855a79dbd028cd61abee56237d6e5 to before e9f4dee534eb1b225b0a120395ad9bc2afe164d3Affected
29a26a56803855a79dbd028cd61abee56237d6e5 to before 01d1b5c9abcaff29a43f1d17a19c33eec92c7dbeAffected
29a26a56803855a79dbd028cd61abee56237d6e5 to before 2c331718d3389b6c5f6855078ab7171849e016bdAffected
29a26a56803855a79dbd028cd61abee56237d6e5 to before a42b69f692165ec39db42d595f4f65a4c8f42e44Affected

LinuxLinux

4.4Affected
before 4.4Not affected
5.4.291 through 5.4.*Not affected
5.10.235 through 5.10.*Not affected
5.15.179 through 5.15.*Not affected
6.1.129 through 6.1.*Not affected
6.6.79 through 6.6.*Not affected
6.12.16 through 6.12.*Not affected
6.13.4 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.