Beveiligingsadvies

CVE-2025-21791

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-27 02:18:29

Laatst bijgewerkt 2026-08-05 11:54:28

Toegewezen door Linux

CVSS-score 7.8

Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU being held: raw_sendmsg() ip_push_pending_frames() ip_send_skb() ip_local_out() __ip_local_out() l3mdev_ip_out() Add rcu_read_lock() / rcu_read_unlock() pair to avoid a potential UAF.

← Alle CVE's bekijken Bekijk op cve.org ↗