cbcvebase.
CVE-2025-21765
published 2025-02-27

CVE-2025-21765: In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6_default_advmss() ip6_default_advmss() needs rcu protection…

PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.59%
44.9th percentile
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6_default_advmss() ip6_default_advmss() needs rcu protection to make sure the net structure it reads does not disappear.

Affected

28 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.129-1 (bookworm)linux 6.1.129-1 (bookworm)
debianlinux-6.1< linux 6.1.129-1 (bookworm)linux 6.1.129-1 (bookworm)
googlechrome_chrome
linuxlinux
linuxlinux>= 5578689a4e3c04f2d43ea39736fd3fa396d80c6e < 78ad057472d8c76e0602402269222f9f9c69879078ad057472d8c76e0602402269222f9f9c698790
linuxlinux>= 5578689a4e3c04f2d43ea39736fd3fa396d80c6e < d02f30d220ef9511568a48dba8a9004c65f8d904d02f30d220ef9511568a48dba8a9004c65f8d904
linuxlinux>= 5578689a4e3c04f2d43ea39736fd3fa396d80c6e < 28de355b63ad42309ed5a03ee7c436c90512265b28de355b63ad42309ed5a03ee7c436c90512265b
linuxlinux>= 5578689a4e3c04f2d43ea39736fd3fa396d80c6e < 84212387caadb211cd9dadd6fd5563bd37dc1f5e84212387caadb211cd9dadd6fd5563bd37dc1f5e
linuxlinux>= 5578689a4e3c04f2d43ea39736fd3fa396d80c6e < 4176a68b0db8fc74ac14fcd00ba8231371051dc24176a68b0db8fc74ac14fcd00ba8231371051dc2
linuxlinux>= 5578689a4e3c04f2d43ea39736fd3fa396d80c6e < 713a40c892f40300d63691d9f85b2a23b48fe1e8713a40c892f40300d63691d9f85b2a23b48fe1e8
linuxlinux>= 5578689a4e3c04f2d43ea39736fd3fa396d80c6e < 550ed693f47370502a71b85382e7f9e6417300b8550ed693f47370502a71b85382e7f9e6417300b8
linuxlinux>= 5578689a4e3c04f2d43ea39736fd3fa396d80c6e < 3c8ffcd248da34fc41e52a46e51505900115fc2a3c8ffcd248da34fc41e52a46e51505900115fc2a
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.237-15.10.237-1
linuxlinux_kernel>= 0 < 6.1.129-16.1.129-1
linuxlinux_kernel>= 0 < 6.12.16-16.12.16-1
linuxlinux_kernel>= 0 < 6.12.16-16.12.16-1
linuxlinux_kernel>= 0 < 5.4.0-216.2365.4.0-216.236
linuxlinux_kernel>= 0 < 5.15.0-140.1505.15.0-140.150
linuxlinux_kernel>= 0 < 6.8.0-78.786.8.0-78.78
linuxlinux_kernel>= 2.6.26 < 5.4.2915.4.291
linuxlinux_kernel>= 5.11 < 5.15.1795.15.179
linuxlinux_kernel>= 5.16 < 6.1.1296.1.129
linuxlinux_kernel>= 5.5 < 5.10.2355.10.235

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.