Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-21762

arp: use RCU protection in arp_xmit()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.291, 5.10.235, 5.15.179, 6.1.129, 6.6.79, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 29a26a56803855a79dbd028cd61abee56237d6e5 · fixed in 10f555e3f573d004ae9d89b3276abb58c4ede5c3; From 29a26a56803855a79dbd028cd61abee56237d6e5 · fixed in 307cd1e2d3cb1cbc6c40c679cada6d7168b18431; From 29a26a56803855a79dbd028cd61abee56237d6e5 · fixed in d9366ac2f956a1948b68c0500f84a3462ff2ed8a; From 29a26a56803855a79dbd028cd61abee56237d6e5 · fixed in f189654459423d4d48bef2d120b4bfba559e6039; From 29a26a56803855a79dbd028cd61abee56237d6e5 · fixed in e9f4dee534eb1b225b0a120395ad9bc2afe164d3; From 29a26a56803855a79dbd028cd61abee56237d6e5 · fixed in 01d1b5c9abcaff29a43f1d17a19c33eec92c7dbe; From 29a26a56803855a79dbd028cd61abee56237d6e5 · fixed in 2c331718d3389b6c5f6855078ab7171849e016bd; From 29a26a56803855a79dbd028cd61abee56237d6e5 · fixed in a42b69f692165ec39db42d595f4f65a4c8f42e44

  • Linux Linux

    4.4

  • KernelLinux

    From 4.4.0 · fixed in 5.4.291; From 5.5.0 · fixed in 5.10.235; From 5.11.0 · fixed in 5.15.179; From 5.16.0 · fixed in 6.1.129; From 6.2.0 · fixed in 6.6.79; From 6.7.0 · fixed in 6.12.16; From 6.13.0 · fixed in 6.13.4

References 8

git.kernel.org