CVE-2025-21759

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-21759
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21759.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-21759
Downstream
AZL (2)
BELL (1)
DEBIAN (1)
ECHO (1)
MINI (1)
OESA (5)
RHSA (13)
RLSA (4)
ROOT (4)
SUSE (11)
UBUNTU (1)
Related
ALSA (4)
SUSE (11)
USN (1)
Published
2025-02-27T02:18:12Z
Modified
2026-10-05T02:30:58Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
ipv6: mcast: extend RCU protection in igmp6_send()
Details

In the Linux kernel, the following vulnerability has been resolved:

ipv6: mcast: extend RCU protection in igmp6_send()

igmp6_send() can be called without RTNL or RCU being held.

Extend RCU protection so that we can safely fetch the net pointer and avoid a potential UAF.

Note that we no longer can use sock_alloc_send_skb() because ipv6.igmp_sk uses GFP_KERNEL allocations which can sleep.

Instead use alloc_skb() and charge the net->ipv6.igmp_sk socket under RCU protection.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21759.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b8ad0cbc58f703972e9e37c4e2a8081dd7e6a551
Fixed
638e8fe3563a82f298fe537a28d5342a97278cf1
Fixed
6901bbb169e3add6c037218d996790cef6b3d650
Fixed
7e0a818ecc4d62e7fb668ea02de0bfe8ba0b7dff
Fixed
81b25a07ebf53f9ef4ca8f3d96a8ddb94561dd5a
Fixed
0bf8e2f3768629d437a32cb824149e6e98254381
Fixed
8e92d6a413feaf968a33f0b439ecf27404407458
Fixed
087c1faa594fa07a66933d750c0b2610aa1a2946

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21759.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.26
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.79
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.16
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21759.json"