QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-21791

Back to search

CVE-2025-21791

Published: Feb 27, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU being held: raw_sendmsg() ip_push_pending_frames() ip_send_skb() ip_local_out() __ip_local_out() l3mdev_ip_out() Add rcu_read_lock() / rcu_read_unlock() pair to avoid a potential UAF.

VendorProductVersions

Linux

Linux

affected
a8e3e1a9f02094145580ea7920c6a1d9aabd5539 - < 6ccaa5797f5362a2aad6baa6ddaf4715ac2dd51e
affected
a8e3e1a9f02094145580ea7920c6a1d9aabd5539 - < 20a3489b396764cc9376e32a9172bee26a89dc3b
affected
a8e3e1a9f02094145580ea7920c6a1d9aabd5539 - < 5bb4228c32261d06e4fbece37ec3828bcc005b6b
affected
a8e3e1a9f02094145580ea7920c6a1d9aabd5539 - < c7574740be8ce68a57d0aece24987b9be2114c3c
affected
a8e3e1a9f02094145580ea7920c6a1d9aabd5539 - < c40cb5c03e37552d6eff963187109e2c3f78ef6f

+3 more versions

Linux

Linux

affected
4.9
unaffected
0 - < 4.9
unaffected
5.4.291 - <= 5.4.*
unaffected
5.10.235 - <= 5.10.*
unaffected
5.15.179 - <= 5.15.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now