CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.8. It affects Linux.
CVE
CVE-2025-21791
Severity
HIGH
CVSS
7.8
EPSS
0.26%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be called without RCU being held: raw_sendmsg() ip_push_pending_frames() ip_send_skb() ip_local_out() __ip_local_out() l3mdev_ip_out() Add rcu_read_lock() / rcu_read_unlock() pair to avoid a potential UAF.
Related CVEs
Other vulnerabilities affecting the same vendor(s)