CVE-2025-21761

Summary

CVE-2025-21761 is a newly identified vulnerability in the Linux kernel affecting the Open vSwitch (OVS) component. Specifically, the function ovs_vport_cmd_fill_info() has been found to be vulnerable when called without the necessary RTNL (Runtime Linux Kernel) or RCU (Read-Copy-Update) protection. This issue can potentially lead to a Use-After-Free (UAF) condition. To mitigate this risk, the Linux kernel developers have implemented RCU protection and the dev_net_rcu() function to ensure proper synchronization during the execution of ovs_vport_cmd_fill_info().

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.