QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-21764

Back to search

CVE-2025-21764

Published: Feb 27, 2025

Modified: May 12, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.

VendorProductVersions

Linux

Linux

affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 - < 96fc896d0e5b37c12808df797397fb16f3080879
affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 - < c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1
affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 - < b870256dd2a5648d5ed2f22316b3ac29a7e5ed63
affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 - < 3c2d705f5adf5d860aaef90cb4211c0fde2ba66d
affected
de09334b9326632bbf1a74bfd8b01866cbbf2f61 - < 9e0ec817eb41a55327a46cd3ce331a9868d60304

+3 more versions

Linux

Linux

affected
3.9
unaffected
0 - < 3.9
unaffected
5.4.291 - <= 5.4.*
unaffected
5.10.235 - <= 5.10.*
unaffected
5.15.179 - <= 5.15.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now