In the Linux kernel, the following vulnerability has been resolved:
ndisc: extend RCU protection in ndiscsendskb()
ndiscsendskb() can be called without RTNL or RCU held.
Acquire rcureadlock() earlier, so that we can use devnetrcu() and avoid a potential UAF.
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92704719033589932073121126669401193527",
"91705581587732406237971189056543814064",
"286215732563393082367528135117961724748",
"52464476732372974305280276640637255633",
"172779224228578519252714267120353132257",
"107344654512987934065825667585845890096",
"222019344717275179830993695893818174265",
"60858007751910616237844959679858783436",
"27303081734719375381189355286955147651",
"121106564181262162844482784221614966274",
"115736234834547679233383940921867161437",
"21794028687397958872448557483754098549",
"270201101337749717145191568892532161392",
"43490454032298481857407627579291791337",
"120912119307711954578172786152689207434",
"281025681808902813269355181890971685136",
"7114648380172823139814089628558570727",
"197464102740039964291122464534352163902",
"51068547618540065876966623748452899618",
"88643764725483383704103927423403277638"
]
},
"id": "CVE-2025-21760-0e108ed7",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae38982f521621c216fc2f5182cd091f4734641d",
"target": {
"file": "net/ipv6/ndisc.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"138726701993361204611027937714432801188",
"251523404141157452735285946708307243288",
"286215732563393082367528135117961724748",
"52464476732372974305280276640637255633",
"172779224228578519252714267120353132257",
"107344654512987934065825667585845890096",
"222019344717275179830993695893818174265",
"60858007751910616237844959679858783436",
"27303081734719375381189355286955147651",
"121106564181262162844482784221614966274",
"115736234834547679233383940921867161437",
"21794028687397958872448557483754098549",
"270201101337749717145191568892532161392",
"43490454032298481857407627579291791337",
"120912119307711954578172786152689207434",
"281025681808902813269355181890971685136",
"7114648380172823139814089628558570727",
"197464102740039964291122464534352163902",
"185413634451477037485023206554317194248",
"258361951414723374704390029253159978047"
]
},
"id": "CVE-2025-21760-28c96ee9",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@10a1f3fece2f0d23a3a618b72b2b4e6f408ef7d1",
"target": {
"file": "net/ipv6/ndisc.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "196593497826358735519566600439040016078",
"length": 1061.0
},
"id": "CVE-2025-21760-33e3c925",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ae38982f521621c216fc2f5182cd091f4734641d",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_send_skb"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "77639518451577207139119417229728527537",
"length": 1068.0
},
"id": "CVE-2025-21760-454d8fc8",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9319d800b5701e7f5e3fa71a5b7c4831fc20d6d",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_send_skb"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"138726701993361204611027937714432801188",
"251523404141157452735285946708307243288",
"286215732563393082367528135117961724748",
"52464476732372974305280276640637255633",
"172779224228578519252714267120353132257",
"107344654512987934065825667585845890096",
"222019344717275179830993695893818174265",
"60858007751910616237844959679858783436",
"27303081734719375381189355286955147651",
"121106564181262162844482784221614966274",
"115736234834547679233383940921867161437",
"21794028687397958872448557483754098549",
"270201101337749717145191568892532161392",
"43490454032298481857407627579291791337",
"120912119307711954578172786152689207434",
"281025681808902813269355181890971685136",
"7114648380172823139814089628558570727",
"197464102740039964291122464534352163902",
"185413634451477037485023206554317194248",
"258361951414723374704390029253159978047"
]
},
"id": "CVE-2025-21760-5909e27d",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e24d225e4cb8cf108bde00b76594499b98f0a74d",
"target": {
"file": "net/ipv6/ndisc.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92704719033589932073121126669401193527",
"91705581587732406237971189056543814064",
"286215732563393082367528135117961724748",
"52464476732372974305280276640637255633",
"172779224228578519252714267120353132257",
"107344654512987934065825667585845890096",
"222019344717275179830993695893818174265",
"60858007751910616237844959679858783436",
"27303081734719375381189355286955147651",
"121106564181262162844482784221614966274",
"115736234834547679233383940921867161437",
"21794028687397958872448557483754098549",
"270201101337749717145191568892532161392",
"43490454032298481857407627579291791337",
"120912119307711954578172786152689207434",
"281025681808902813269355181890971685136",
"7114648380172823139814089628558570727",
"197464102740039964291122464534352163902",
"185413634451477037485023206554317194248",
"258361951414723374704390029253159978047"
]
},
"id": "CVE-2025-21760-c3b086e7",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9319d800b5701e7f5e3fa71a5b7c4831fc20d6d",
"target": {
"file": "net/ipv6/ndisc.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "314155464888231111768162190775222123150",
"length": 1074.0
},
"id": "CVE-2025-21760-cfb6b603",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@789230e5a8c1097301afc802e242c79bc8835c67",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_send_skb"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "204776335465306327582156818567396191900",
"length": 1075.0
},
"id": "CVE-2025-21760-da81a686",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e24d225e4cb8cf108bde00b76594499b98f0a74d",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_send_skb"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"92704719033589932073121126669401193527",
"91705581587732406237971189056543814064",
"286215732563393082367528135117961724748",
"52464476732372974305280276640637255633",
"172779224228578519252714267120353132257",
"107344654512987934065825667585845890096",
"222019344717275179830993695893818174265",
"60858007751910616237844959679858783436",
"27303081734719375381189355286955147651",
"121106564181262162844482784221614966274",
"115736234834547679233383940921867161437",
"21794028687397958872448557483754098549",
"270201101337749717145191568892532161392",
"43490454032298481857407627579291791337",
"120912119307711954578172786152689207434",
"281025681808902813269355181890971685136",
"240996030922917551950691123651554108889",
"299828567871155221476922640403014913776",
"100949278056808622662605180316397468645",
"88643764725483383704103927423403277638"
]
},
"id": "CVE-2025-21760-dc9e146d",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@789230e5a8c1097301afc802e242c79bc8835c67",
"target": {
"file": "net/ipv6/ndisc.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"function_hash": "204776335465306327582156818567396191900",
"length": 1075.0
},
"id": "CVE-2025-21760-dd4a63ba",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@10a1f3fece2f0d23a3a618b72b2b4e6f408ef7d1",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_send_skb"
}
}
]