In the Linux kernel, the following vulnerability has been resolved:
ndisc: use RCU protection in ndiscallocskb()
ndiscallocskb() can be called without RTNL or RCU being held.
Add RCU protection to avoid possible UAF.
[
{
"id": "CVE-2025-21764-117a858e",
"target": {
"file": "net/ipv6/ndisc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e0ec817eb41a55327a46cd3ce331a9868d60304",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-1819affc",
"target": {
"file": "net/ipv6/ndisc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b870256dd2a5648d5ed2f22316b3ac29a7e5ed63",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-239ba4d0",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"digest": {
"function_hash": "275331024954922374073706739064078015228",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c2d705f5adf5d860aaef90cb4211c0fde2ba66d",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-3cc2a2cf",
"target": {
"file": "net/ipv6/ndisc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd1065f92eb7ff21b9ba5308a86f33d1670bf926",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-41456b0b",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"digest": {
"function_hash": "275331024954922374073706739064078015228",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96fc896d0e5b37c12808df797397fb16f3080879",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-4ed1fbd3",
"target": {
"file": "net/ipv6/ndisc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bbec88e4108e8d6fb468d3817fa652140a44ff28",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-5604b329",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"digest": {
"function_hash": "275331024954922374073706739064078015228",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-83167654",
"target": {
"file": "net/ipv6/ndisc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c2d705f5adf5d860aaef90cb4211c0fde2ba66d",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-9d594313",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"digest": {
"function_hash": "275331024954922374073706739064078015228",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b870256dd2a5648d5ed2f22316b3ac29a7e5ed63",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-b0184be1",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"digest": {
"function_hash": "275331024954922374073706739064078015228",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e0ec817eb41a55327a46cd3ce331a9868d60304",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-bd531bee",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"digest": {
"function_hash": "275331024954922374073706739064078015228",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bbec88e4108e8d6fb468d3817fa652140a44ff28",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-e56a0413",
"target": {
"file": "net/ipv6/ndisc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-ec7e2639",
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"digest": {
"function_hash": "275331024954922374073706739064078015228",
"length": 545.0
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd1065f92eb7ff21b9ba5308a86f33d1670bf926",
"signature_version": "v1"
},
{
"id": "CVE-2025-21764-f4ec94c9",
"target": {
"file": "net/ipv6/ndisc.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
]
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96fc896d0e5b37c12808df797397fb16f3080879",
"signature_version": "v1"
}
]