CVE-2025-21762
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 27, 2025
Updated: Mar 13, 2025
CWE ID 416
Summary
CVE-2025-21762 is a vulnerability affecting the Linux kernel. This issue lies in the arp_xmit() function where RCU (Read-Copy-Update) protection is missing. Consequently, arp_xmit() can be invoked without RTNL (Runtime netlink) or RCU protection, potentially leading to a Use-After-Free (UAF) condition. The vulnerability has been resolved by implementing RCU protection in arp_xmit() to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.