← Database

CVE-2025-21760

HIGH CVSS: 8.1 Published: 2025-02-27 Modified: 2026-07-30

Description

In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held. Acquire rcu_read_lock() earlier, so that we can use dev_net_rcu() and avoid a potential UAF.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-416

References