CVE-2025-21763
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 27, 2025
Updated: Mar 13, 2025
CWE ID 416
Summary
CVE-2025-21763 is a vulnerability affecting the Linux kernel. The issue lies in the 'neighbour' subsystem, specifically in the '__neigh_notify()' function. This function can be called without the required RTNL or RCU protection, leading to a use-after-free (UAF) condition. By implementing RCU protection in '__neigh_notify()', the risk of potential UAF vulnerabilities is mitigated.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.