Skip to main content
← All vulnerabilities
CVE-2025-21766

ipv4: use RCU protection in __ip_rt_update_pmtu()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.15, 4.20, 5.5, 5.9, 5.15.179, and 4 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: ipv4: use RCU protection in __ip_rt_update_pmtu() __ip_rt_update_pmtu() must use RCU protection to make sure the net structure it reads does not disappear.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 · fixed in ce3c6165fce0f06305c806696882a3ad4b90e33f; From 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 · fixed in ea07480b23225942208f1b754fea1e7ec486d37e; From 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 · fixed in 9b1766d1ff5fe496aabe9fc5f4e34e53f35c11c4; From 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 · fixed in 4583748b65dee4d61bd50a2214715b4237bc152a; From 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 · fixed in a39f61d212d822b3062d7f70fa0588e50e55664e; From 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 · fixed in 139512191bd06f1b496117c76372b2ce372c9a41; From 4.14.200 · fixed in 4.15; From 4.19.148 · fixed in 4.20; From 5.4.68 · fixed in 5.5; From 5.8.12 · fixed in 5.9

  • Linux Linux

    5.9

  • KernelLinux

    From 5.9.0 · fixed in 5.15.179; From 5.16.0 · fixed in 6.1.129; From 6.2.0 · fixed in 6.6.79; From 6.7.0 · fixed in 6.12.16; From 6.13.0 · fixed in 6.13.4

References 6

git.kernel.org