In the Linux kernel, the following vulnerability has been resolved:
ndisc: use RCU protection in ndiscallocskb()
ndiscallocskb() can be called without RTNL or RCU being held.
Add RCU protection to avoid possible UAF.
[
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e0ec817eb41a55327a46cd3ce331a9868d60304",
"digest": {
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
],
"threshold": 0.9
},
"id": "CVE-2025-21764-117a858e"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b870256dd2a5648d5ed2f22316b3ac29a7e5ed63",
"digest": {
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
],
"threshold": 0.9
},
"id": "CVE-2025-21764-1819affc"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c2d705f5adf5d860aaef90cb4211c0fde2ba66d",
"digest": {
"length": 545.0,
"function_hash": "275331024954922374073706739064078015228"
},
"id": "CVE-2025-21764-239ba4d0"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd1065f92eb7ff21b9ba5308a86f33d1670bf926",
"digest": {
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
],
"threshold": 0.9
},
"id": "CVE-2025-21764-3cc2a2cf"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96fc896d0e5b37c12808df797397fb16f3080879",
"digest": {
"length": 545.0,
"function_hash": "275331024954922374073706739064078015228"
},
"id": "CVE-2025-21764-41456b0b"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bbec88e4108e8d6fb468d3817fa652140a44ff28",
"digest": {
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
],
"threshold": 0.9
},
"id": "CVE-2025-21764-4ed1fbd3"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1",
"digest": {
"length": 545.0,
"function_hash": "275331024954922374073706739064078015228"
},
"id": "CVE-2025-21764-5604b329"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c2d705f5adf5d860aaef90cb4211c0fde2ba66d",
"digest": {
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
],
"threshold": 0.9
},
"id": "CVE-2025-21764-83167654"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b870256dd2a5648d5ed2f22316b3ac29a7e5ed63",
"digest": {
"length": 545.0,
"function_hash": "275331024954922374073706739064078015228"
},
"id": "CVE-2025-21764-9d594313"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e0ec817eb41a55327a46cd3ce331a9868d60304",
"digest": {
"length": 545.0,
"function_hash": "275331024954922374073706739064078015228"
},
"id": "CVE-2025-21764-b0184be1"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bbec88e4108e8d6fb468d3817fa652140a44ff28",
"digest": {
"length": 545.0,
"function_hash": "275331024954922374073706739064078015228"
},
"id": "CVE-2025-21764-bd531bee"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1",
"digest": {
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
],
"threshold": 0.9
},
"id": "CVE-2025-21764-e56a0413"
},
{
"signature_type": "Function",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c",
"function": "ndisc_alloc_skb"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd1065f92eb7ff21b9ba5308a86f33d1670bf926",
"digest": {
"length": 545.0,
"function_hash": "275331024954922374073706739064078015228"
},
"id": "CVE-2025-21764-ec7e2639"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "net/ipv6/ndisc.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96fc896d0e5b37c12808df797397fb16f3080879",
"digest": {
"line_hashes": [
"73922751308198343866279670324361891447",
"103244140727611276382773853111594128657",
"30306955002580348497269526637008120849",
"139881418032576774093044632846289250922",
"156181769472356246350431684190272210957",
"315080421584632456164942499114552440160",
"262259250053213402574290376522264563767",
"4033169643768191632796068313754242992",
"259732931259591523227021162677980692034",
"335090661129067462406323167145634031258",
"23410106732019169757276389268647567863",
"340204372785792581149380490638005714609",
"175293853215896871989097666175916152860",
"214491631257691543385829021759505416272",
"27350803966552281516505280967784555176"
],
"threshold": 0.9
},
"id": "CVE-2025-21764-f4ec94c9"
}
]