CVE-2025-21760
HighCVSS 8.1Exploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
In the Linux kernel, a vulnerability was found in the ndisc_send_skb() function, which can be called without RTNL or RCU lock. The lack of proper RCU protection allows a use-after-free (UAF) when accessing the device's network namespace.
Risk Assessment
This vulnerability may lead to kernel memory corruption, potentially allowing a local attacker to escalate privileges or cause a denial of service (DoS).
Recommendation
Immediately update the Linux kernel to a version containing the fix (commit extending RCU protection in ndisc_send_skb()).
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without RTNL or RCU held. Acquire rcu_read_lock() earlier, so that we can use dev_net_rcu() and avoid a potential UAF.