NetSight
IP …
high8.1

CVE-2025-21760

In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTN…

Impact

In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held. Acquire rcu_read_lock() earlier, so that we can use dev_net_rcu() and avoid a potential UAF.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.26 before 5.4.291
from 5.5 before 5.10.235
from 5.11 before 5.15.179
from 5.16 before 6.1.129
from 6.2 before 6.6.79
from 6.7 before 6.12.16

Weakness classification

CWE-416

References