CVE-2025-21766

CVE-2025-21766

High · published February 27, 2025

CVSS v3.1
8.1
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ipv4: use RCU protection in __ip_rt_update_pmtu()

__ip_rt_update_pmtu() must use RCU protection to make

sure the net structure it reads does not disappear.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00570 · 46.4th percentile
Published
2025-02-27T08:15Z
Affected products (14)
ProductVersionsFixed in
linux/linux_kernel≥ 4.14.200, < 4.154.15
linux/linux_kernel≥ 4.19.148, < 4.204.20
linux/linux_kernel≥ 5.4.68, < 5.55.5
linux/linux_kernel≥ 5.8.12, < 5.95.9
linux/linux_kernel≥ 5.9.1, < 5.15.1795.15.179
linux/linux_kernel≥ 5.16, < 6.1.1296.1.129
linux/linux_kernel≥ 6.2, < 6.6.796.6.79
linux/linux_kernel≥ 6.7, < 6.12.166.12.16
linux/linux_kernel≥ 6.13, < 6.13.46.13.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (9)
EPSS history
Timeline
  • 27 FEB 02:18Z
    ipv4: use RCU protection in __ip_rt_update_pmtu()
    cvelistv5