In the Linux kernel, the following vulnerability has been resolved:
neighbour: use RCU protection in _neighnotify()
_neighnotify() can be called without RTNL or RCU protection.
Use RCU protection to avoid potential UAF.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cdd5c2a12ddad8a77ce1838ff9f29aa587de82df",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "__neigh_notify",
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-261dc5c6",
"digest": {
"length": 515.0,
"function_hash": "281267610128809585891644741978131106402"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e1aed6be381bcd7f46d4ca9d7ef0f5f3d6a1be32",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "__neigh_notify",
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-26d1238a",
"digest": {
"length": 515.0,
"function_hash": "281267610128809585891644741978131106402"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40d8f2f2a373b6c294ffac394d2bb814b572ead1",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "__neigh_notify",
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-2c4b62c7",
"digest": {
"length": 515.0,
"function_hash": "281267610128809585891644741978131106402"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@becbd5850c03ed33b232083dd66c6e38c0c0e569",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "__neigh_notify",
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-2c9d6fe6",
"digest": {
"length": 515.0,
"function_hash": "281267610128809585891644741978131106402"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@40d8f2f2a373b6c294ffac394d2bb814b572ead1",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-3d6437b7",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11838330536397727711993797944846212866",
"331255662188395117934794428309539444913",
"5603576937265404806230080548070988237",
"138003333424535265311929809248150762837",
"300210214471126011695469587379845582616",
"111211034928565290588167176379019961331",
"141641986536297309000982717550519338174",
"281253475212179616536665156731537614561",
"290448764578001599008728345026223778217",
"276565524859319259941545604955572224360",
"157264480581560151632619725427716566323",
"296333534555617936303521812878020536756"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@784eb2376270e086f7db136d154b8404edacf97b",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "__neigh_notify",
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-6483e7c7",
"digest": {
"length": 515.0,
"function_hash": "281267610128809585891644741978131106402"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb2aa90cd3fba15ad7efb5cdda28f3d1082379",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-6f5f147b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11838330536397727711993797944846212866",
"331255662188395117934794428309539444913",
"5603576937265404806230080548070988237",
"138003333424535265311929809248150762837",
"300210214471126011695469587379845582616",
"111211034928565290588167176379019961331",
"141641986536297309000982717550519338174",
"281253475212179616536665156731537614561",
"290448764578001599008728345026223778217",
"276565524859319259941545604955572224360",
"157264480581560151632619725427716566323",
"296333534555617936303521812878020536756"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8666e9aab801328c1408a19fbf4070609dc0695a",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "__neigh_notify",
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-75b074db",
"digest": {
"length": 515.0,
"function_hash": "281267610128809585891644741978131106402"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@559307d25235e24b5424778c7332451b6c741159",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "__neigh_notify",
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-9f9afee8",
"digest": {
"length": 515.0,
"function_hash": "281267610128809585891644741978131106402"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8666e9aab801328c1408a19fbf4070609dc0695a",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-b10ae12d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11838330536397727711993797944846212866",
"331255662188395117934794428309539444913",
"5603576937265404806230080548070988237",
"138003333424535265311929809248150762837",
"300210214471126011695469587379845582616",
"111211034928565290588167176379019961331",
"141641986536297309000982717550519338174",
"281253475212179616536665156731537614561",
"290448764578001599008728345026223778217",
"276565524859319259941545604955572224360",
"157264480581560151632619725427716566323",
"296333534555617936303521812878020536756"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cdd5c2a12ddad8a77ce1838ff9f29aa587de82df",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-c1873ba9",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11838330536397727711993797944846212866",
"331255662188395117934794428309539444913",
"5603576937265404806230080548070988237",
"138003333424535265311929809248150762837",
"300210214471126011695469587379845582616",
"111211034928565290588167176379019961331",
"141641986536297309000982717550519338174",
"281253475212179616536665156731537614561",
"290448764578001599008728345026223778217",
"276565524859319259941545604955572224360",
"157264480581560151632619725427716566323",
"296333534555617936303521812878020536756"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1cbb2aa90cd3fba15ad7efb5cdda28f3d1082379",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "__neigh_notify",
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-c702ad07",
"digest": {
"length": 515.0,
"function_hash": "281267610128809585891644741978131106402"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@559307d25235e24b5424778c7332451b6c741159",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-cc6abaf7",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11838330536397727711993797944846212866",
"331255662188395117934794428309539444913",
"5603576937265404806230080548070988237",
"138003333424535265311929809248150762837",
"300210214471126011695469587379845582616",
"111211034928565290588167176379019961331",
"141641986536297309000982717550519338174",
"281253475212179616536665156731537614561",
"290448764578001599008728345026223778217",
"276565524859319259941545604955572224360",
"157264480581560151632619725427716566323",
"296333534555617936303521812878020536756"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@becbd5850c03ed33b232083dd66c6e38c0c0e569",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-cd0837dd",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11838330536397727711993797944846212866",
"331255662188395117934794428309539444913",
"5603576937265404806230080548070988237",
"138003333424535265311929809248150762837",
"300210214471126011695469587379845582616",
"111211034928565290588167176379019961331",
"141641986536297309000982717550519338174",
"281253475212179616536665156731537614561",
"290448764578001599008728345026223778217",
"276565524859319259941545604955572224360",
"157264480581560151632619725427716566323",
"296333534555617936303521812878020536756"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@784eb2376270e086f7db136d154b8404edacf97b",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-e90c42e2",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11838330536397727711993797944846212866",
"331255662188395117934794428309539444913",
"5603576937265404806230080548070988237",
"138003333424535265311929809248150762837",
"300210214471126011695469587379845582616",
"111211034928565290588167176379019961331",
"141641986536297309000982717550519338174",
"281253475212179616536665156731537614561",
"290448764578001599008728345026223778217",
"276565524859319259941545604955572224360",
"157264480581560151632619725427716566323",
"296333534555617936303521812878020536756"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e1aed6be381bcd7f46d4ca9d7ef0f5f3d6a1be32",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "net/core/neighbour.c"
},
"id": "CVE-2025-21763-f176155b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"11838330536397727711993797944846212866",
"331255662188395117934794428309539444913",
"5603576937265404806230080548070988237",
"138003333424535265311929809248150762837",
"300210214471126011695469587379845582616",
"111211034928565290588167176379019961331",
"141641986536297309000982717550519338174",
"281253475212179616536665156731537614561",
"290448764578001599008728345026223778217",
"276565524859319259941545604955572224360",
"157264480581560151632619725427716566323",
"296333534555617936303521812878020536756"
]
},
"signature_type": "Line"
}
]