Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-21763

neighbour: use RCU protection in __neigh_notify()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.291, 5.10.235, 5.15.179, 6.1.129, 6.6.79, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 426b5303eb435d98b9bee37a807be386bc2b3320 · fixed in e1aed6be381bcd7f46d4ca9d7ef0f5f3d6a1be32; From 426b5303eb435d98b9bee37a807be386bc2b3320 · fixed in 8666e9aab801328c1408a19fbf4070609dc0695a; From 426b5303eb435d98b9bee37a807be386bc2b3320 · fixed in 40d8f2f2a373b6c294ffac394d2bb814b572ead1; From 426b5303eb435d98b9bee37a807be386bc2b3320 · fixed in 784eb2376270e086f7db136d154b8404edacf97b; From 426b5303eb435d98b9bee37a807be386bc2b3320 · fixed in 1cbb2aa90cd3fba15ad7efb5cdda28f3d1082379; From 426b5303eb435d98b9bee37a807be386bc2b3320 · fixed in cdd5c2a12ddad8a77ce1838ff9f29aa587de82df; From 426b5303eb435d98b9bee37a807be386bc2b3320 · fixed in 559307d25235e24b5424778c7332451b6c741159; From 426b5303eb435d98b9bee37a807be386bc2b3320 · fixed in becbd5850c03ed33b232083dd66c6e38c0c0e569

  • Linux Linux

    2.6.25

  • KernelLinux

    From 2.6.25 · fixed in 5.4.291; From 5.5.0 · fixed in 5.10.235; From 5.11.0 · fixed in 5.15.179; From 5.16.0 · fixed in 6.1.129; From 6.2.0 · fixed in 6.6.79; From 6.7.0 · fixed in 6.12.16; From 6.13.0 · fixed in 6.13.4

References 8

git.kernel.org