CVE-2025-21764
Linux Kernel ndisc Use-After-Free (UAF)
Description
In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF.
INFO
Published Date :
Feb. 27, 2025, 3:15 a.m.
Last Modified :
March 21, 2025, 3:44 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
5.9
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2025-21764.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-21764 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-21764 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Mar. 21, 2025
Action Type Old Value New Value Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.13.4 *cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.79 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.16 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.179 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.129 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.235 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.9 up to (excluding) 5.4.291 Added Reference Type kernel.org: https://git.kernel.org/stable/c/3c2d705f5adf5d860aaef90cb4211c0fde2ba66d Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/628e6d18930bbd21f2d4562228afe27694f66da9 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/96fc896d0e5b37c12808df797397fb16f3080879 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/9e0ec817eb41a55327a46cd3ce331a9868d60304 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/b870256dd2a5648d5ed2f22316b3ac29a7e5ed63 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/bbec88e4108e8d6fb468d3817fa652140a44ff28 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/cd1065f92eb7ff21b9ba5308a86f33d1670bf926 Types: Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mar. 13, 2025
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/96fc896d0e5b37c12808df797397fb16f3080879 Added Reference https://git.kernel.org/stable/c/b870256dd2a5648d5ed2f22316b3ac29a7e5ed63 Added Reference https://git.kernel.org/stable/c/c30893ef3d9cde8e7e8e4fd06b53d2c935bbccb1 -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Feb. 27, 2025
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Added CWE CWE-416 -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 27, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RTNL or RCU being held. Add RCU protection to avoid possible UAF. Added Reference https://git.kernel.org/stable/c/3c2d705f5adf5d860aaef90cb4211c0fde2ba66d Added Reference https://git.kernel.org/stable/c/628e6d18930bbd21f2d4562228afe27694f66da9 Added Reference https://git.kernel.org/stable/c/9e0ec817eb41a55327a46cd3ce331a9868d60304 Added Reference https://git.kernel.org/stable/c/bbec88e4108e8d6fb468d3817fa652140a44ff28 Added Reference https://git.kernel.org/stable/c/cd1065f92eb7ff21b9ba5308a86f33d1670bf926
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2025-21764 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2025-21764
weaknesses.