cbcvebase.
CVE-2025-21766
published 2025-02-27

CVE-2025-21766: In the Linux kernel, the following vulnerability has been resolved: ipv4: use RCU protection in __ip_rt_update_pmtu() __ip_rt_update_pmtu() must use RCU…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.52%
41.3th percentile
In the Linux kernel, the following vulnerability has been resolved: ipv4: use RCU protection in __ip_rt_update_pmtu() __ip_rt_update_pmtu() must use RCU protection to make sure the net structure it reads does not disappear.

Affected

36 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.129-1 (bookworm)linux 6.1.129-1 (bookworm)
debianlinux-6.1< linux 6.1.129-1 (bookworm)linux 6.1.129-1 (bookworm)
linuxlinux
linuxlinux
linuxlinux
linuxlinux
linuxlinux
linuxlinux>= 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 < ce3c6165fce0f06305c806696882a3ad4b90e33fce3c6165fce0f06305c806696882a3ad4b90e33f
linuxlinux>= 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 < ea07480b23225942208f1b754fea1e7ec486d37eea07480b23225942208f1b754fea1e7ec486d37e
linuxlinux>= 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 < 9b1766d1ff5fe496aabe9fc5f4e34e53f35c11c49b1766d1ff5fe496aabe9fc5f4e34e53f35c11c4
linuxlinux>= 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 < 4583748b65dee4d61bd50a2214715b4237bc152a4583748b65dee4d61bd50a2214715b4237bc152a
linuxlinux>= 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 < a39f61d212d822b3062d7f70fa0588e50e55664ea39f61d212d822b3062d7f70fa0588e50e55664e
linuxlinux>= 2fbc6e89b2f1403189e624cabaf73e189c5e50c6 < 139512191bd06f1b496117c76372b2ce372c9a41139512191bd06f1b496117c76372b2ce372c9a41
linuxlinux>= 4.14.200 < 4.154.15
linuxlinux>= 4.19.148 < 4.204.20
linuxlinux>= 5.4.68 < 5.55.5
linuxlinux>= 5.8.12 < 5.95.9
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.1.129-16.1.129-1
linuxlinux_kernel>= 0 < 6.12.16-16.12.16-1
linuxlinux_kernel>= 0 < 6.12.16-16.12.16-1

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.