Use-After-Free Vulnerability in Linux Kernel Networking

CVE-2025-21764

Summary

A vulnerability exists in the Linux kernel's networking component that impacts the ndisc_alloc_skb() function. This function can be invoked without holding the necessary Real-Time Networking Lock (RTNL) or Read-Copy Update (RCU) protections, potentially leading to a Use-After-Free condition. This flaw has been addressed by introducing RCU protection to ensure safe memory management, thereby enhancing overall system robustness against exploitation.

References