CVE-2025-21764
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
ndisc: use RCU protection in ndisc_alloc_skb()
In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| de09334b9326632bbf1a74bfd8b01866cbbf2f61 | affected | git | 96fc896d0e5b37c12808df797397fb16f3080879 | Unavailable | None listed |
| de09334b9326632bbf1a74bfd8b01866cbbf2f61 | affected | git | c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1 | Unavailable | None listed |
| de09334b9326632bbf1a74bfd8b01866cbbf2f61 | affected | git | b870256dd2a5648d5ed2f22316b3ac29a7e5ed63 | Unavailable | None listed |
| de09334b9326632bbf1a74bfd8b01866cbbf2f61 | affected | git | 3c2d705f5adf5d860aaef90cb4211c0fde2ba66d | Unavailable | None listed |
| de09334b9326632bbf1a74bfd8b01866cbbf2f61 | affected | git | 9e0ec817eb41a55327a46cd3ce331a9868d60304 | Unavailable | None listed |
| de09334b9326632bbf1a74bfd8b01866cbbf2f61 | affected | git | bbec88e4108e8d6fb468d3817fa652140a44ff28 | Unavailable | None listed |
| de09334b9326632bbf1a74bfd8b01866cbbf2f61 | affected | git | cd1065f92eb7ff21b9ba5308a86f33d1670bf926 | Unavailable | None listed |
| de09334b9326632bbf1a74bfd8b01866cbbf2f61 | affected | git | 628e6d18930bbd21f2d4562228afe27694f66da9 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 3.9 | Unavailable | None listed |
| 5.4.291 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.235 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.179 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.129 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.79 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.16 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.13.4 | unaffected | semver | Unavailable | 6.13.* | None listed |
| 6.14 | unaffected | original_commit_for_fix | Unavailable | * | None listed |