High severity · published Feb 27, 2025
CVE-2025-21762
arp: use RCU protection in arp_xmit()
8.1
CVSS
0.7%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
arp: use RCU protection in arp_xmit()
arp_xmit() can be called without RTNL or RCU protection.
Use RCU protection to avoid potential UAF.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
4.4 before 5.4.291; 5.5 before 5.10.235; 5.11 before 5.15.179; 5.16 before 6.1.129; 6.2 before 6.6.79; 6.7 before 6.12.16; +3 more · source: NVD
LI
Linux · Linux
29a26a56803855a79dbd028cd61abee56237d6e5 before 10f555e3f573d004ae9d89b3276abb58c4ede5c3; 29a26a56803855a79dbd028cd61abee56237d6e5 before 307cd1e2d3cb1cbc6c40c679cada6d7168b18431; 29a26a56803855a79dbd028cd61abee56237d6e5 before d9366ac2f956a1948b68c0500f84a3462ff2ed8a; 29a26a56803855a79dbd028cd61abee56237d6e5 before f189654459423d4d48bef2d120b4bfba559e6039; 29a26a56803855a79dbd028cd61abee56237d6e5 before e9f4dee534eb1b225b0a120395ad9bc2afe164d3; 29a26a56803855a79dbd028cd61abee56237d6e5 before 01d1b5c9abcaff29a43f1d17a19c33eec92c7dbe; +3 more · source: vendor
SS
SIMATIC S7-1500 TM MFP - BIOS · Siemens
0 · source: CISA
SS
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · Siemens
0; 0 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-21762
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-21762
Patch
https://git.kernel.org/stable/c/01d1b5c9abcaff29a43f1d17a19c33eec92c7dbe
Patch
https://git.kernel.org/stable/c/10f555e3f573d004ae9d89b3276abb58c4ede5c3
Patch
https://git.kernel.org/stable/c/2c331718d3389b6c5f6855078ab7171849e016bd
Patch
https://git.kernel.org/stable/c/307cd1e2d3cb1cbc6c40c679cada6d7168b18431
Patch
https://git.kernel.org/stable/c/a42b69f692165ec39db42d595f4f65a4c8f42e44
Patch
https://git.kernel.org/stable/c/d9366ac2f956a1948b68c0500f84a3462ff2ed8a
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability