PT-2025-8876 · Linux+11 · Linux Kernel+11

Eric Dumazet · Published 2025-02-07 · Updated 2026-04-20 · CVE-2025-21764

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the ndisc alloc skb() function, which can be called without RTNL or RCU being held, potentially leading to a use-after-free (UAF) condition. To address this, RCU protection has been added to ndisc alloc skb().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025:8333

ALSA-2025:9580

ALSA-2025:9581

ALT-PU-2025-12647

ALT-PU-2025-4689

ALT-PU-2025-5012

ALT-PU-2025-5359

ALT-PU-2025-5361

ALT-PU-2025-5437

AZL-58898

AZL-58925

BDU:2025-04368

CESA-2025_9580

CESA-2025_9581

CVE-2025-21764

DLA-4102-1

DLA-4178-1

INFSA-2025_8333

INFSA-2025_9580

INFSA-2025_9581

OESA-2025-1446

OESA-2025-1450

OESA-2025-1462

OESA-2025-1465

OESA-2025-1466

OPENSUSE-SU-2025_1177-1

OPENSUSE-SU-2025_1178-1

OPENSUSE-SU-2025_1180-1

RHSA-2025:10211

RHSA-2025:8333

RHSA-2025:9079

RHSA-2025:9490

RHSA-2025:9491

RHSA-2025:9492

RHSA-2025:9493

RHSA-2025:9494

RHSA-2025:9497

RHSA-2025:9498

RHSA-2025:9580

RHSA-2025:9581

RHSA-2025:9584

RHSA-2025_8333

RHSA-2025_9580

RHSA-2025_9581

SUSE-SU-2025:01600-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:1177-1

SUSE-SU-2025:1178-1

SUSE-SU-2025:1180-1

SUSE-SU-2025:20190-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20260-1

SUSE-SU-2025:20270-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01967-1

SUSE-SU-2025_1177-1

SUSE-SU-2025_1178-1

SUSE-SU-2025_1180-1

SUSE-SU-2026:0474-1

SUSE-SU-2026:0475-1

SUSE-SU-2026:0495-1

SUSE-SU-2026:0496-1

SUSE-SU-2026:0617-1

SUSE-SU-2026:1131-1

USN-7510-1

USN-7510-2

USN-7510-3

USN-7510-4

USN-7510-5

USN-7510-6

USN-7510-7

USN-7510-8

USN-7511-1

USN-7511-2

USN-7511-3

USN-7512-1

USN-7516-1

USN-7516-2

USN-7516-3

USN-7516-4

USN-7516-5

USN-7516-6

USN-7516-7

USN-7516-8

USN-7516-9

USN-7517-1

USN-7517-2

USN-7517-3

USN-7518-1

USN-7521-1

USN-7521-2

USN-7521-3

USN-7539-1

USN-7540-1

USN-7593-1

USN-7602-1

USN-7640-1

USN-7703-1

USN-7703-2

USN-7703-3

USN-7703-4

USN-7719-1

USN-7737-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 3225

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21764.json · Exploit
• https://ubuntu.com/security/CVE-2024-53161 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-52332 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57910 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35958 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7510-4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53181 · Security Note
• https://errata.almalinux.org/8/ALSA-2025-9580.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21864 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0496-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53101 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21739 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22013 · Security Note
• https://ubuntu.com/security/CVE-2024-58080 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7516-4 · Vendor Advisory