cbcvebase.
CVE-2025-21763
published 2025-02-27

CVE-2025-21763: In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without…

PriorityP336high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.7th percentile
In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without RTNL or RCU protection. Use RCU protection to avoid potential UAF.

Affected

30 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.129-1 (bookworm)linux 6.1.129-1 (bookworm)
debianlinux-6.1< linux 6.1.129-1 (bookworm)linux 6.1.129-1 (bookworm)
linuxlinux
linuxlinux>= 426b5303eb435d98b9bee37a807be386bc2b3320 < e1aed6be381bcd7f46d4ca9d7ef0f5f3d6a1be32e1aed6be381bcd7f46d4ca9d7ef0f5f3d6a1be32
linuxlinux>= 426b5303eb435d98b9bee37a807be386bc2b3320 < 8666e9aab801328c1408a19fbf4070609dc0695a8666e9aab801328c1408a19fbf4070609dc0695a
linuxlinux>= 426b5303eb435d98b9bee37a807be386bc2b3320 < 40d8f2f2a373b6c294ffac394d2bb814b572ead140d8f2f2a373b6c294ffac394d2bb814b572ead1
linuxlinux>= 426b5303eb435d98b9bee37a807be386bc2b3320 < 784eb2376270e086f7db136d154b8404edacf97b784eb2376270e086f7db136d154b8404edacf97b
linuxlinux>= 426b5303eb435d98b9bee37a807be386bc2b3320 < 1cbb2aa90cd3fba15ad7efb5cdda28f3d10823791cbb2aa90cd3fba15ad7efb5cdda28f3d1082379
linuxlinux>= 426b5303eb435d98b9bee37a807be386bc2b3320 < cdd5c2a12ddad8a77ce1838ff9f29aa587de82dfcdd5c2a12ddad8a77ce1838ff9f29aa587de82df
linuxlinux>= 426b5303eb435d98b9bee37a807be386bc2b3320 < 559307d25235e24b5424778c7332451b6c741159559307d25235e24b5424778c7332451b6c741159
linuxlinux>= 426b5303eb435d98b9bee37a807be386bc2b3320 < becbd5850c03ed33b232083dd66c6e38c0c0e569becbd5850c03ed33b232083dd66c6e38c0c0e569
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.237-15.10.237-1
linuxlinux_kernel>= 0 < 6.1.129-16.1.129-1
linuxlinux_kernel>= 0 < 6.12.16-16.12.16-1
linuxlinux_kernel>= 0 < 6.12.16-16.12.16-1
linuxlinux_kernel>= 0 < 5.4.0-216.2365.4.0-216.236
linuxlinux_kernel>= 0 < 5.15.0-140.1505.15.0-140.150
linuxlinux_kernel>= 0 < 6.8.0-78.786.8.0-78.78
linuxlinux_kernel>= 2.6.25 < 5.4.2915.4.291
linuxlinux_kernel>= 5.11 < 5.15.1795.15.179
linuxlinux_kernel>= 5.16 < 6.1.1296.1.129
linuxlinux_kernel>= 5.5 < 5.10.2355.10.235
linuxlinux_kernel>= 6.13 < 6.13.46.13.4
linuxlinux_kernel>= 6.2 < 6.6.796.6.79

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_msrc6.6MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.