CVE-2025-21765: ipv6: use RCU protection in ip6_default_advmss()
Published Feb 27, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
ipv6: use RCU protection in ip6defaultadvmss()
ip6defaultadvmss() needs rcu protection to make sure the net structure it reads does not disappear.
Affected Software
14 affected components
Linux Linux kernel
Linux Linux kernel>=2.6.26<5.4.291
Linux Linux kernel>=5.5<5.10.235
Linux Linux kernel>=5.11<5.15.179
Linux Linux kernel>=5.16<6.1.129
Linux Linux kernel>=6.2<6.6.79
Linux Linux kernel>=6.7<6.12.16
Linux Linux kernel>=6.13<6.13.4
Linux Linux kernel=6.14-rc1
Linux Linux kernel=6.14-rc2
IBM Verify Identity Access<=11.0 - 11.0.2
IBM Security Verify Access<=10.0 - 10.0.9.1
IBM Verify Identity Access Container<=11.0 - 11.0.2
IBM Security Verify Access Container<=10.0 - 10.0.9.1
Event History
Feb 27, 2025
CVE Published
via MITRE·02:18 AM
Data Sourced
via MITRE·02:18 AM
Description
Data Sourced
via Red Hat·03:06 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·03:15 AM
RemedyDescriptionSeverityAffected Software
Jul 8, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21765?
CVE-2025-21765 does not have a specified CVSS score but represents a significant issue in the Linux kernel that requires attention.
2
How do I fix CVE-2025-21765?
To fix CVE-2025-21765, update to the latest version of the Linux kernel where the vulnerability has been resolved.
3
What systems are affected by CVE-2025-21765?
CVE-2025-21765 affects various versions of the Linux kernel that utilize IPv6.
4
What is the impact of CVE-2025-21765?
The impact of CVE-2025-21765 includes potential instability or crashes in the kernel when handling IPv6 traffic.
5
Is CVE-2025-21765 being actively exploited?
As of now, there is no known active exploitation of CVE-2025-21765 reported in the wild.