Skip to main content
← All vulnerabilities
CVE-2025-21765

ipv6: use RCU protection in ip6_default_advmss()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.291, 5.10.235, 5.15.179, 6.1.129, 6.6.79, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6_default_advmss() ip6_default_advmss() needs rcu protection to make sure the net structure it reads does not disappear.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 5578689a4e3c04f2d43ea39736fd3fa396d80c6e · fixed in 78ad057472d8c76e0602402269222f9f9c698790; From 5578689a4e3c04f2d43ea39736fd3fa396d80c6e · fixed in d02f30d220ef9511568a48dba8a9004c65f8d904; From 5578689a4e3c04f2d43ea39736fd3fa396d80c6e · fixed in 28de355b63ad42309ed5a03ee7c436c90512265b; From 5578689a4e3c04f2d43ea39736fd3fa396d80c6e · fixed in 84212387caadb211cd9dadd6fd5563bd37dc1f5e; From 5578689a4e3c04f2d43ea39736fd3fa396d80c6e · fixed in 4176a68b0db8fc74ac14fcd00ba8231371051dc2; From 5578689a4e3c04f2d43ea39736fd3fa396d80c6e · fixed in 713a40c892f40300d63691d9f85b2a23b48fe1e8; From 5578689a4e3c04f2d43ea39736fd3fa396d80c6e · fixed in 550ed693f47370502a71b85382e7f9e6417300b8; From 5578689a4e3c04f2d43ea39736fd3fa396d80c6e · fixed in 3c8ffcd248da34fc41e52a46e51505900115fc2a

  • Linux Linux

    2.6.26

  • KernelLinux

    From 2.6.26 · fixed in 5.4.291; From 5.5.0 · fixed in 5.10.235; From 5.11.0 · fixed in 5.15.179; From 5.16.0 · fixed in 6.1.129; From 6.2.0 · fixed in 6.6.79; From 6.7.0 · fixed in 6.12.16; From 6.13.0 · fixed in 6.13.4

References 8

git.kernel.org