CVE-2025-21764: ndisc: use RCU protection in ndisc_alloc_skb()
In the Linux kernel, the following vulnerability has been resolved:
ndisc: use RCU protection in ndiscallocskb()
ndiscallocskb() can be called without RTNL or RCU being held.
Add RCU protection to avoid possible UAF.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.82.1-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.180.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21764?
CVE-2025-21764 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-21764?
To fix CVE-2025-21764, update to the latest stable version of the Linux kernel that includes the patch.
What does CVE-2025-21764 impact?
CVE-2025-21764 impacts the ndisc_alloc_skb() function within the Linux kernel.
What type of vulnerability is CVE-2025-21764?
CVE-2025-21764 is a Use After Free (UAF) vulnerability that requires RCU protection in the kernel.
Is CVE-2025-21764 exploitable in all versions of the Linux kernel?
CVE-2025-21764 is exploitable in certain versions of the Linux kernel, specifically those prior to the patch.