Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2025-21762

arp: use RCU protection in arp_xmit()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 29a26a56803855a79dbd028cd61abee56237d6e5 to < 10f555e3f573d004ae9d89b3276abb58c4ede5c3affected
  • 29a26a56803855a79dbd028cd61abee56237d6e5 to < 307cd1e2d3cb1cbc6c40c679cada6d7168b18431affected
  • 29a26a56803855a79dbd028cd61abee56237d6e5 to < d9366ac2f956a1948b68c0500f84a3462ff2ed8aaffected
  • 29a26a56803855a79dbd028cd61abee56237d6e5 to < f189654459423d4d48bef2d120b4bfba559e6039affected
  • 29a26a56803855a79dbd028cd61abee56237d6e5 to < e9f4dee534eb1b225b0a120395ad9bc2afe164d3affected
  • 29a26a56803855a79dbd028cd61abee56237d6e5 to < 01d1b5c9abcaff29a43f1d17a19c33eec92c7dbeaffected
  • 29a26a56803855a79dbd028cd61abee56237d6e5 to < 2c331718d3389b6c5f6855078ab7171849e016bdaffected
  • 29a26a56803855a79dbd028cd61abee56237d6e5 to < a42b69f692165ec39db42d595f4f65a4c8f42e44affected

Linux Linux

Default version status: affected

  • 4.4affected
  • 0 to < 4.4unaffected
  • 5.4.291 to ≤ 5.4.*unaffected
  • 5.10.235 to ≤ 5.10.*unaffected
  • 5.15.179 to ≤ 5.15.*unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.79 to ≤ 6.6.*unaffected
  • 6.12.16 to ≤ 6.12.*unaffected
  • 6.13.4 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References