In the Linux kernel, the following vulnerability has been resolved:
ipv4: use RCU protection in _iprtupdatepmtu()
_iprtupdatepmtu() must use RCU protection to make sure the net structure it reads does not disappear.
[
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1125.0,
"function_hash": "178529659267126496981866469821747563525"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a39f61d212d822b3062d7f70fa0588e50e55664e",
"target": {
"file": "net/ipv4/route.c",
"function": "__ip_rt_update_pmtu"
},
"id": "CVE-2025-21766-1efbc779"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"77861996800441827003915722608736066169",
"223951656864765518162596302114006426571",
"275467378363299579479998037470527793930",
"125296169205979900188405641194296523788",
"289802998055624731191533407803153835485",
"244449047241551549140953728915100102271",
"236184120869082533358907247829051580756",
"56684870495591367761096219931349915637",
"24753300126485958803241980560881870888",
"263615922320662462378099889406429370977",
"259823401096274355516951721224728602989",
"308236250495183973049439732860258364554",
"27515247880407987361801766516652251228",
"117365299709020556187125749091780008347",
"110211063374246715142836167180858508133",
"102178599330960789552406010252673959319",
"225406992123771878869303222779320981594",
"147574183504376274544621684946925390261",
"131621036192909963043866012347647262520",
"1656264956998952967298918354435286814",
"45154132153622690893044237786931144606",
"329142383579427312456060768905992185926",
"110211063374246715142836167180858508133",
"63310590949995402604794866073746526358",
"284939303884544353569228732472828404446"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@139512191bd06f1b496117c76372b2ce372c9a41",
"target": {
"file": "net/ipv4/route.c"
},
"id": "CVE-2025-21766-69e1984d"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"77861996800441827003915722608736066169",
"223951656864765518162596302114006426571",
"275467378363299579479998037470527793930",
"125296169205979900188405641194296523788",
"289802998055624731191533407803153835485",
"244449047241551549140953728915100102271",
"236184120869082533358907247829051580756",
"56684870495591367761096219931349915637",
"24753300126485958803241980560881870888",
"263615922320662462378099889406429370977",
"259823401096274355516951721224728602989",
"308236250495183973049439732860258364554",
"27515247880407987361801766516652251228",
"117365299709020556187125749091780008347",
"110211063374246715142836167180858508133",
"102178599330960789552406010252673959319",
"225406992123771878869303222779320981594",
"147574183504376274544621684946925390261",
"131621036192909963043866012347647262520",
"1656264956998952967298918354435286814",
"45154132153622690893044237786931144606",
"329142383579427312456060768905992185926",
"110211063374246715142836167180858508133",
"63310590949995402604794866073746526358",
"284939303884544353569228732472828404446"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a39f61d212d822b3062d7f70fa0588e50e55664e",
"target": {
"file": "net/ipv4/route.c"
},
"id": "CVE-2025-21766-759b7521"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1125.0,
"function_hash": "178529659267126496981866469821747563525"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ea07480b23225942208f1b754fea1e7ec486d37e",
"target": {
"file": "net/ipv4/route.c",
"function": "__ip_rt_update_pmtu"
},
"id": "CVE-2025-21766-7cea5dad"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1125.0,
"function_hash": "178529659267126496981866469821747563525"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b1766d1ff5fe496aabe9fc5f4e34e53f35c11c4",
"target": {
"file": "net/ipv4/route.c",
"function": "__ip_rt_update_pmtu"
},
"id": "CVE-2025-21766-82a83178"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"77861996800441827003915722608736066169",
"223951656864765518162596302114006426571",
"275467378363299579479998037470527793930",
"125296169205979900188405641194296523788",
"289802998055624731191533407803153835485",
"244449047241551549140953728915100102271",
"236184120869082533358907247829051580756",
"56684870495591367761096219931349915637",
"24753300126485958803241980560881870888",
"263615922320662462378099889406429370977",
"259823401096274355516951721224728602989",
"308236250495183973049439732860258364554",
"27515247880407987361801766516652251228",
"117365299709020556187125749091780008347",
"110211063374246715142836167180858508133",
"102178599330960789552406010252673959319",
"225406992123771878869303222779320981594",
"147574183504376274544621684946925390261",
"131621036192909963043866012347647262520",
"1656264956998952967298918354435286814",
"45154132153622690893044237786931144606",
"329142383579427312456060768905992185926",
"110211063374246715142836167180858508133",
"63310590949995402604794866073746526358",
"284939303884544353569228732472828404446"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4583748b65dee4d61bd50a2214715b4237bc152a",
"target": {
"file": "net/ipv4/route.c"
},
"id": "CVE-2025-21766-ad98915a"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1125.0,
"function_hash": "178529659267126496981866469821747563525"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce3c6165fce0f06305c806696882a3ad4b90e33f",
"target": {
"file": "net/ipv4/route.c",
"function": "__ip_rt_update_pmtu"
},
"id": "CVE-2025-21766-afbcea38"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"77861996800441827003915722608736066169",
"223951656864765518162596302114006426571",
"275467378363299579479998037470527793930",
"125296169205979900188405641194296523788",
"289802998055624731191533407803153835485",
"244449047241551549140953728915100102271",
"236184120869082533358907247829051580756",
"56684870495591367761096219931349915637",
"24753300126485958803241980560881870888",
"263615922320662462378099889406429370977",
"259823401096274355516951721224728602989",
"308236250495183973049439732860258364554",
"27515247880407987361801766516652251228",
"117365299709020556187125749091780008347",
"110211063374246715142836167180858508133",
"102178599330960789552406010252673959319",
"225406992123771878869303222779320981594",
"147574183504376274544621684946925390261",
"131621036192909963043866012347647262520",
"1656264956998952967298918354435286814",
"45154132153622690893044237786931144606",
"329142383579427312456060768905992185926",
"110211063374246715142836167180858508133",
"63310590949995402604794866073746526358",
"284939303884544353569228732472828404446"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9b1766d1ff5fe496aabe9fc5f4e34e53f35c11c4",
"target": {
"file": "net/ipv4/route.c"
},
"id": "CVE-2025-21766-b168170b"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"77861996800441827003915722608736066169",
"223951656864765518162596302114006426571",
"275467378363299579479998037470527793930",
"125296169205979900188405641194296523788",
"289802998055624731191533407803153835485",
"244449047241551549140953728915100102271",
"236184120869082533358907247829051580756",
"56684870495591367761096219931349915637",
"24753300126485958803241980560881870888",
"263615922320662462378099889406429370977",
"259823401096274355516951721224728602989",
"308236250495183973049439732860258364554",
"27515247880407987361801766516652251228",
"117365299709020556187125749091780008347",
"110211063374246715142836167180858508133",
"102178599330960789552406010252673959319",
"225406992123771878869303222779320981594",
"147574183504376274544621684946925390261",
"131621036192909963043866012347647262520",
"1656264956998952967298918354435286814",
"45154132153622690893044237786931144606",
"329142383579427312456060768905992185926",
"110211063374246715142836167180858508133",
"63310590949995402604794866073746526358",
"284939303884544353569228732472828404446"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ea07480b23225942208f1b754fea1e7ec486d37e",
"target": {
"file": "net/ipv4/route.c"
},
"id": "CVE-2025-21766-e39240df"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1125.0,
"function_hash": "178529659267126496981866469821747563525"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4583748b65dee4d61bd50a2214715b4237bc152a",
"target": {
"file": "net/ipv4/route.c",
"function": "__ip_rt_update_pmtu"
},
"id": "CVE-2025-21766-f157a4cb"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1125.0,
"function_hash": "178529659267126496981866469821747563525"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@139512191bd06f1b496117c76372b2ce372c9a41",
"target": {
"file": "net/ipv4/route.c",
"function": "__ip_rt_update_pmtu"
},
"id": "CVE-2025-21766-f72b5580"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"77861996800441827003915722608736066169",
"223951656864765518162596302114006426571",
"275467378363299579479998037470527793930",
"125296169205979900188405641194296523788",
"289802998055624731191533407803153835485",
"244449047241551549140953728915100102271",
"236184120869082533358907247829051580756",
"56684870495591367761096219931349915637",
"24753300126485958803241980560881870888",
"263615922320662462378099889406429370977",
"259823401096274355516951721224728602989",
"308236250495183973049439732860258364554",
"27515247880407987361801766516652251228",
"117365299709020556187125749091780008347",
"110211063374246715142836167180858508133",
"102178599330960789552406010252673959319",
"225406992123771878869303222779320981594",
"147574183504376274544621684946925390261",
"131621036192909963043866012347647262520",
"1656264956998952967298918354435286814",
"45154132153622690893044237786931144606",
"329142383579427312456060768905992185926",
"110211063374246715142836167180858508133",
"63310590949995402604794866073746526358",
"284939303884544353569228732472828404446"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce3c6165fce0f06305c806696882a3ad4b90e33f",
"target": {
"file": "net/ipv4/route.c"
},
"id": "CVE-2025-21766-fda93596"
}
]