Linux Kernel Vulnerability in IPv6 Multicast Processing

CVE-2025-21758

Summary

A vulnerability in the Linux kernel's IPv6 multicast processing has been identified in the mld_newpack() function. This function can be invoked without proper protection mechanisms, potentially exposing systems to risks. The resolution involves applying RCU (Read-Copy-Update) protection and switching to the alloc_skb() function for memory allocation, ensuring safer socket handling during multicast operations. Without these protections, there could be unintended consequences in network communication and system stability.

References