Network Vulnerability in Linux Kernel Affecting Packet Management

CVE-2025-21766

Summary

A vulnerability in the Linux kernel's handling of IPv4 routing can lead to issues if the __ip_rt_update_pmtu() function does not utilize RCU (Read-Copy-Update) protection. This function is critical for maintaining the integrity of network structures during updates to packet management. Without proper RCU coordination, there's a risk that the network structures being read could become invalid, potentially leading to instability or system crashes in network operations.

References