CVE-2025-21759

HIGH EPSS 93.4%
Published Feb 27, 20251y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Feb 27, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTNL or RCU being held. Extend RCU protection so that we can safely fetch the net pointer and avoid a potential UAF. Note that we no longer can use sock_alloc_send_skb() because ipv6.igmp_sk uses GFP_KERNEL allocations which can sleep. Instead use alloc_skb() and charge the net->ipv6.igmp_sk socket under RCU protection.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
93.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥2.6.26  –  <6.6.79
linuxlinux_kernel*≥6.7  –  <6.12.16
linuxlinux_kernel*≥6.13  –  <6.13.4
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/087c1faa594fa07a66933d750c0b2610aa1a2946
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/0bf8e2f3768629d437a32cb824149e6e98254381
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/81b25a07ebf53f9ef4ca8f3d96a8ddb94561dd5a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8e92d6a413feaf968a33f0b439ecf27404407458
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/087c1faa594fa07a66933d750c0b2610aa1a2946
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/0bf8e2f3768629d437a32cb824149e6e98254381
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/81b25a07ebf53f9ef4ca8f3d96a8ddb94561dd5a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8e92d6a413feaf968a33f0b439ecf27404407458
    Patch