CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out()
In the Linux kernel, the following vulnerability has been resolved:
vrf: use RCU protection in l3mdevl3out()
l3mdevl3out() can be called without RCU being held:
rawsendmsg() ippushpendingframes() ipsendskb() iplocalout() iplocalout() l3mdevipout()
Add rcureadlock() / rcureadunlock() pair to avoid a potential UAF.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21791?
CVE-2025-21791 has a severity rating that reflects its potential impact on system stability and security.
What systems are affected by CVE-2025-21791?
CVE-2025-21791 affects the Linux kernel, particularly in functions related to routing traffic.
How do I fix CVE-2025-21791?
To fix CVE-2025-21791, update the Linux kernel to the latest version that includes the patch.
What does CVE-2025-21791 involve?
CVE-2025-21791 involves inadequate protection when calling l3mdev_l3_out() in the Linux kernel.
Is there a workaround for CVE-2025-21791?
There is no widely recommended workaround for CVE-2025-21791; updating the kernel is the best approach.