CVE-2025-21764

ndisc: use RCU protection in ndisc_alloc_skb()

State: Published
Severity: 7.8 High
Published: Feb 27, 2025
Updated: Oct 15, 2026
Reserved: Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ndisc: use RCU protection in ndisc_alloc_skb()

ndisc_alloc_skb() can be called without RTNL or RCU being held.

Add RCU protection to avoid possible UAF.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before 96fc896d0e5b37c12808df797397fb16f3080879Affected de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1Affected de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before b870256dd2a5648d5ed2f22316b3ac29a7e5ed63Affected de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before 3c2d705f5adf5d860aaef90cb4211c0fde2ba66dAffected de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before 9e0ec817eb41a55327a46cd3ce331a9868d60304Affected de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before bbec88e4108e8d6fb468d3817fa652140a44ff28Affected de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before cd1065f92eb7ff21b9ba5308a86f33d1670bf926Affected de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before 628e6d18930bbd21f2d4562228afe27694f66da9Affected
LinuxLinux	3.9Affected before 3.9Not affected 5.4.291 through 5.4.Not affected 5.10.235 through 5.10.Not affected 5.15.179 through 5.15.Not affected 6.1.129 through 6.1.Not affected 6.6.79 through 6.6.Not affected 6.12.16 through 6.12.Not affected 6.13.4 through 6.13.*Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before 96fc896d0e5b37c12808df797397fb16f3080879Affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1Affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before b870256dd2a5648d5ed2f22316b3ac29a7e5ed63Affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before 3c2d705f5adf5d860aaef90cb4211c0fde2ba66dAffected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before 9e0ec817eb41a55327a46cd3ce331a9868d60304Affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before bbec88e4108e8d6fb468d3817fa652140a44ff28Affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before cd1065f92eb7ff21b9ba5308a86f33d1670bf926Affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 to before 628e6d18930bbd21f2d4562228afe27694f66da9Affected

LinuxLinux

3.9Affected
before 3.9Not affected
5.4.291 through 5.4.*Not affected
5.10.235 through 5.10.*Not affected
5.15.179 through 5.15.*Not affected
6.1.129 through 6.1.*Not affected
6.6.79 through 6.6.*Not affected
6.12.16 through 6.12.*Not affected
6.13.4 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.