CVE-2025-21758

Published: Feb 27, 2025Modified: Jul 30, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU protection to mld_newpack() mld_newpack() can be called without RTNL or RCU being held. Note that we no longer can use sock_alloc_send_skb() because ipv6.igmp_sk uses GFP_KERNEL allocations which can sleep. Instead use alloc_skb() and charge the net->ipv6.igmp_sk socket under RCU protection.

Affected (7)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.26 to 5.15.179
Linux Linux Kernel	From 5.16 to 6.1.129
Linux Linux Kernel	From 6.13 to 6.13.4
Linux Linux Kernel	From 6.2 to 6.6.79
Linux Linux Kernel	From 6.7 to 6.12.16
Linux Linux Kernel	Version 6.14 rc1
Linux Linux Kernel	Version 6.14 rc2