CVE-2025-21760

In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held. Acquire rcu_read_lock() earlier, so that we can use dev_net_rcu() and avoid a potential UAF.

CVSS 3.1

8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

38% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-25)

CWE

CWE-416

Published

2025-02-27

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/04e05112f10354ffc3bb6cc796d553bab161594c
• https://git.kernel.org/stable/c/10a1f3fece2f0d23a3a618b72b2b4e6f408ef7d1
• https://git.kernel.org/stable/c/4d576202b90b1b95a7c428a80b536f91b8201bcc
• https://git.kernel.org/stable/c/789230e5a8c1097301afc802e242c79bc8835c67
• https://git.kernel.org/stable/c/a9319d800b5701e7f5e3fa71a5b7c4831fc20d6d

Check your stackJSON