CVE-2025-21765

MediumCVSS 5.5

Published: 27/02/2025(UTC)Updated: 14/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

In the Linux kernel, a vulnerability was found in the ip6_default_advmss() function, which lacked RCU protection when reading the network structure. This could lead to a use-after-free condition.

Risk Assessment

An attacker could exploit this vulnerability to access freed memory, potentially causing system crashes or privilege escalation.

Recommendation

Immediately update the Linux kernel to a version containing the fix that adds RCU protection in the ip6_default_advmss() function.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6_default_advmss() ip6_default_advmss() needs rcu protection to make sure the net structure it reads does not disappear.