CVE-2025-21760: ndisc: extend RCU protection in ndisc_send_skb()
In the Linux kernel, the following vulnerability has been resolved:
ndisc: extend RCU protection in ndiscsendskb()
ndiscsendskb() can be called without RTNL or RCU held.
Acquire rcureadlock() earlier, so that we can use devnetrcu() and avoid a potential UAF.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.180.1-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.82.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21760?
CVE-2025-21760 has a severity rating that indicates it poses a potential risk of a use-after-free vulnerability in the Linux kernel.
How do I fix CVE-2025-21760?
To fix CVE-2025-21760, you should upgrade to the latest patched version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2025-21760?
CVE-2025-21760 affects systems running the Linux kernel, particularly versions prior to the fix release.
What type of vulnerability is CVE-2025-21760?
CVE-2025-21760 is classified as a use-after-free vulnerability that can lead to potential exploitation in the Linux kernel.
Is there a workaround for CVE-2025-21760?
Currently, there are no known workarounds for CVE-2025-21760, and the best course of action is to apply the kernel updates as they become available.