REDHAT-BUG-2414506: Medium severity linux/kernel vulnerability
Published Nov 12, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
net: use dstdevrcu() in sksetupcaps()
Use RCU to protect accesses to dst->dev from sksetupcaps() and skdstgsomaxsize().
Also use dstdevrcu() in ip6dstmtumaybeforward(), and ipdstmtumaybeforward().
ip4dsthoplimit() can use dstdevnetrcu().
Affected Software
1 affected component
linux/kernel
Event History
Nov 12, 2025
Data Sourced
via Red Hat·11:04 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Red Hat errata are referenced for remediation?
The referenced Red Hat errata are RHSA-2026:1690 and RHSA-2026:2212.
2
Is an upstream vulnerability announcement available?
Yes. The references include a linux-cve-announce posting dated 2025-11-12 for CVE-2025-40170.