NetSight
IP …
high7.8

CVE-2025-21763

In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without RT…

Impact

In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.25 before 5.4.291
from 5.5 before 5.10.235
from 5.11 before 5.15.179
from 5.16 before 6.1.129
from 6.2 before 6.6.79
from 6.7 before 6.12.16

Weakness classification

CWE-416

References