Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21763

neighbour: use RCU protection in __neigh_notify()

Description

In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 426b5303eb435d98b9bee37a807be386bc2b3320 to < e1aed6be381bcd7f46d4ca9d7ef0f5f3d6a1be32affected
  • 426b5303eb435d98b9bee37a807be386bc2b3320 to < 8666e9aab801328c1408a19fbf4070609dc0695aaffected
  • 426b5303eb435d98b9bee37a807be386bc2b3320 to < 40d8f2f2a373b6c294ffac394d2bb814b572ead1affected
  • 426b5303eb435d98b9bee37a807be386bc2b3320 to < 784eb2376270e086f7db136d154b8404edacf97baffected
  • 426b5303eb435d98b9bee37a807be386bc2b3320 to < 1cbb2aa90cd3fba15ad7efb5cdda28f3d1082379affected
  • 426b5303eb435d98b9bee37a807be386bc2b3320 to < cdd5c2a12ddad8a77ce1838ff9f29aa587de82dfaffected
  • 426b5303eb435d98b9bee37a807be386bc2b3320 to < 559307d25235e24b5424778c7332451b6c741159affected
  • 426b5303eb435d98b9bee37a807be386bc2b3320 to < becbd5850c03ed33b232083dd66c6e38c0c0e569affected

Linux Linux

Default version status: affected

  • 2.6.25affected
  • 0 to < 2.6.25unaffected
  • 5.4.291 to ≤ 5.4.*unaffected
  • 5.10.235 to ≤ 5.10.*unaffected
  • 5.15.179 to ≤ 5.15.*unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.79 to ≤ 6.6.*unaffected
  • 6.12.16 to ≤ 6.12.*unaffected
  • 6.13.4 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References