CVE-2025-21760
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 27, 2025
Updated: Mar 13, 2025
CWE ID 416
Summary
CVE-2025-21760 is a vulnerability affecting the Linux kernel. The issue lies in the ndisc_send_skb() function, where this function can be called without RTNL or RCU (Read-Copy Update) locks in place. This lack of locks can lead to a Use-After-Free (UAF) vulnerability. To mitigate this risk, the developers have resolved the issue by acquiring rcu_read_lock() earlier in the function call sequence. By doing so, they can ensure the necessary locks are held before using dev_net_rcu(), thereby avoiding the potential UAF condition.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.