CVE-2025-21760

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the IPv6 protocol implementation within the net/ipv6/ndisc.c module. The ndisc send skb() function can be called without holding RTNL (Routing Netlink) or RCU (Read-Copy-Update) locks, which allows the reuse of previously freed memory. This could impact the confidentiality, integrity, and availability of protected information.

Recommendations Update the Linux kernel to a version where the ndisc send skb() function is modified to acquire rcu read lock() earlier to ensure proper protection when using dev net rcu().