CVE-2025-21761

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the openvswitch, specifically the ovs vport cmd fill info() function, which can be called without RTNL or RCU protection. This could lead to a potential use-after-free (UAF) issue. To address this, RCU protection and dev net rcu() are used.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.