CVE-2025-21763
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
neighbour: use RCU protection in __neigh_notify()
In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 426b5303eb435d98b9bee37a807be386bc2b3320 | affected | git | e1aed6be381bcd7f46d4ca9d7ef0f5f3d6a1be32 | Unavailable | None listed |
| 426b5303eb435d98b9bee37a807be386bc2b3320 | affected | git | 8666e9aab801328c1408a19fbf4070609dc0695a | Unavailable | None listed |
| 426b5303eb435d98b9bee37a807be386bc2b3320 | affected | git | 40d8f2f2a373b6c294ffac394d2bb814b572ead1 | Unavailable | None listed |
| 426b5303eb435d98b9bee37a807be386bc2b3320 | affected | git | 784eb2376270e086f7db136d154b8404edacf97b | Unavailable | None listed |
| 426b5303eb435d98b9bee37a807be386bc2b3320 | affected | git | 1cbb2aa90cd3fba15ad7efb5cdda28f3d1082379 | Unavailable | None listed |
| 426b5303eb435d98b9bee37a807be386bc2b3320 | affected | git | cdd5c2a12ddad8a77ce1838ff9f29aa587de82df | Unavailable | None listed |
| 426b5303eb435d98b9bee37a807be386bc2b3320 | affected | git | 559307d25235e24b5424778c7332451b6c741159 | Unavailable | None listed |
| 426b5303eb435d98b9bee37a807be386bc2b3320 | affected | git | becbd5850c03ed33b232083dd66c6e38c0c0e569 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.25 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.25 | Unavailable | None listed |
| 5.4.291 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.235 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.179 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.129 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.79 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.16 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.13.4 | unaffected | semver | Unavailable | 6.13.* | None listed |
| 6.14 | unaffected | original_commit_for_fix | Unavailable | * | None listed |